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[Technical Field] 

[0001] 

The present invention relates to an information 
processing apparatus, an information recording medium, 
an information processing method, and a computer program. 
More particularly, the present invention relates to an 
information processing apparatus, an information 
recording medium, an information processing method, and 
a computer program that realize, in the utilization of 
content of information recording media storing various 
kinds of content requiring copyright management, 
copyright management and utilization management on a 
data unit basis that is provided by segmenting content 
stored in such recording media. 

[Background Art] 

[0002] 

Audio data such as music, image data such as 
movies, game programs, various application programs, and 
other various kinds of software data (hereafter referred 
to as content) may be stored on recording media such as 
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DVD (Digital Versatile Disc) , MD (Mini Disc) , and CD 
(Compact Disc) for example as digital data. Recently, 
discs permitting high-density recording based on blue 
lasers have been developed. Digital content is stored 
in these various kinds of information recording media 
for the provision to users. Users reproduce and use 
content by means of reproduction apparatus such as their 
PCs (Personal Computers) and disc players for example. 
[0003] 

The distribution right and other rights of 
various kinds of content such as music data and image 
data are generally owned by creators or sellers thereof. 
Therefore, it is a general practice , in the distribution 
of content, to configure each piece of content such that 
certain usage rules are applied, namely, only authorized 
users are allowed to access content, thereby preventing 
any unauthorized duplication for example of content from 
occurring . 
[0004] 

Especially, recording apparatuses and recording 
media for digitally recording information have recently 
been gaining in popularity. These digital recording 
apparatuses and digital recording media allow the 
repetition of recording and reproduction without 
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involving the degradation of image and audio qualities 
for example. This in turn has been causing problems of 
the distribution of illegally copied content via the 
Internet, the circulation of so-called pirated discs in 
which content is illegally copied on CD-R and other 
types of discs, and the use of copy content stored on 
hard discs of PCs for example. 
[0005] 

Mass -storage recording media such as DVDs and 
recording media recently developed by use of blue lasers 
allow one piece of recording medium to digitally store 
mass data like one or more movies. This capability of 
recording video information and so on as digital 
information increasingly makes it important to prevent 
illegal copying from practicing and to protect copyright 
owners. These days, various kinds of technologies have 
been put into practical use for this purpose. 
[0006] 

For example, with DVD players, a content 
scramble system is used. In the content scramble system, 
video data, audio data, and/or other kinds of data are 
recorded on each DVD-ROM (Read Only Memory) in an 
encrypted manner and a key for decrypting the encrypted 
data is given to each licensed DVD player. The license 
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is given only to those DVD players which are designed to 
comply with predetermined operation rules such as 
against illegal copy operations. Therefore, each 
licensed DVD player is able to decrypt the encrypted 
data recorded to each DVD-ROM by use of the given key, 
thereby reproducing image and audio data from the DVD- 
ROM. 
[0007] 

On the other hand, unlicensed DVD players have 
no keys for decrypting, so that these players cannot 
decrypt the encrypted data recorded on DVD-ROMs. Thus, 
the content scramble system configuration prevents each 
DVD player not satisfying license conditions from 
reproducing the DVD-ROMs recording digital data, thereby 
excluding illegal copy operations. 
[0008] 

Recently, so-called home networks have been 
gaining in popularity supported by the growth of data 
communication networks, in which household appliances, 
computers, and peripheral devices are interconnected by 
a network for communication with each other. Home 
networks provide users with convenience and amenity on 
the basis of the communication between networked devices 
to share the data processing capabilities of the 
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networked devices and transferring content between these 
devices. For these advantages, home networks are 
expected to increasingly spread in the future. 
[0009] 

The advancing networking as described above 
increases chances for the content stored in information 
storage media to be used from devices connected to a 
home network. The above-mentioned related- art illegal 
copy prevention system is based on a basic concept that 
content reproduction is permitted only on one licensed 
device for example. Therefore, this system does not 
fully consider a situation in which a networked device 
loaded with a recording medium, a home server or a 
player for example, is accessed by another networked 
device, a PC or a TV set for example, thereby 
reproducing content via a network. 
[0010] 

Conventionally, the main use form of content is 
that one piece of content stored in a recording medium 
is executed by one reproduction apparatus, so that it is 
enough for content use management only to set a content 
usage right such as a license to each piece of content 
or to each reproducing apparatus. However, the recent 
rapid increase in the storage size of information 
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recording media and the recent rapid digitization and 
networking of household appliances and electronic 
devices require different content use management 
configurations from the conventional ones. To be more 
specific, the following requirements have come up for 
example . 
[0011] 

(1) Realizing a configuration that allows the 
recording of plural pieces of content on a recording 
medium and the management of use for each of the 
recorded content; 

(2) Realizing a content use management 
configuration that allows the use of content within 
particular networks such as home networks, namely, the 
content reproduction by networked devices or the content 
copying for home servers for example; and 

(3) Realizing a configuration for securely 
distributing, to particular users, the information 
necessary for content reproduction such as a key to be 
applied to the decryption of content for example via a 
network . 

It is required to substantialize the above- 
mentioned configurations (1) through (3) . 
[Disclosure of Invention] 



S04P1108 



[Problems to be Solved by the Invention] 
[0012] 

It is therefore an object of the present 
invention to provide an information processing apparatus, 
an information recording medium, an information 
processing method, and a computer program for realizing 
the copyright management and the use management for each 
piece of data obtained by segmenting the content stored 
in recording media in the content use of information 
recording media storing various kinds of content 
requiring copyright management. 

[Means for Solving the Problems] 

[0013] 

In carrying out the invention and according to a 
first aspect thereof, an information recording medium 
storing content having a configuration in which a 
content management unit that is a data section area 
includes at least any one of: 

content stored in an information recording 

medium; 

a content reproduction section specification 

file; 

a content reproduction processing program; 
an application index file; and 
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an application execution file 
is set; and 

any one of a data file and a program file 
included in the content management unit is stored as 
encrypted data based on an individual unit key 
corresponding to the content management unit . 
[0014] 

In the above-mentioned information recording 
medium, at least some of content management units set in 
the information recording medium are units set in 
correspondence with title information or index 
information of each piece of content stored in the 
information recording medium and a unique content 
management unit and a unit key corresponding thereto are 
determined on the basis of the selection of the title 
information and the index information. 
[0015] 

In the above-mentioned information recording 
medium, the title information and the index information 
are presentable to a user. 
[0016] 

In the above-mentioned information recording 
medium, at least some of content management units set in 
the information recording medium are units that are set 
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in correspondence with a plurality of content 
reproduction processing programs stored in the 
information recording medium, and a unique content 
management unit and a unit key corresponding thereto are 
determined on the basis of the determination of the 
plurality of content reproduction processing programs to 
be executed on a reproducing apparatus on which the 
information recording medium is loaded. 
[0017] 

In the above-mentioned information recording 
mediupi, at least some of content management units set in 
the information recording medium are units that are set 
in correspondence with a plurality of content 
reproduction section specification files stored in the 
information recording medium, and a unique content 
management unit and a unit key corresponding thereto are 
determined on the basis of the content reproduction 
section specification file selected by the content 
reproduction processing program to be executed on a 
reproducing apparatus on which the information recording 
medium is loaded. 
[0018] 

In the above-mentioned information recording 
medium, at least some of content management units set in 
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the information recording medium are units that are set 
in correspondence with clip files that are a plurality 
of content real data storage files stored in the 
information recording medium, and a unique content 
management unit and a unit key corresponding thereto are 
determined on the basis of a reproduction clip file 
selected by the content reproduction processing program 
to be executed on a reproducing apparatus on which the 
information recording medium is loaded. 
[0019] 

In the above-mentioned information recording 
medium, content management units set in the information 
recording medium include a first unit including content 
real data stored in the information recording medium and 
a second unit not including content real data but 
including an application execution file corresponding to 
an application index file stored in the information 
recording medium, the first unit and the second unit 
including at least one of a data file and a program file 
encrypted by different unit keys. 
[0020] 

In the above-mentioned information recording 
medium, at least some of content management units set in 
the information recording medium are configured as units 
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including an application execution file and a content 
reproduction processing program stored in the 
information recording medium. 
[0021] 

In the above-mentioned information recording 
medium, at least some of content management units set in 
the information recording medium are configured as units 
including an application execution file, a content 
reproduction processing file, and an application 
resource file for use in the execution of the 
application execution file stored in the information 
recording medium. 
[0022] 

In the above-mentioned information recording 
medium, some of content management units set in the 
information recording medium are configured as units 
including a content reproduction section specification 
file, an AV stream file as content real data to be 
referenced from the content reproduction section 
specification file, an application execution file, and 
an application resource file for use in the execution of 
the application execution file stored in the information 
recording medium. 
[0023] 
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In the above-mentioned information recording 
medium, a management table in which unit setting unit 
information, content management unit identification 
information, and unit key identification information are 
related with each other as information forming each of 
the content management unit is stored. 
[0024] 

In the above-mentioned information recording 
medium, the information recording medium stores a status 
management table in which status information indicative 
whether each of the content management units is in 
network independent status or network associated status 
is stored. 
[0025] 

In the above-mentioned information recording 
medium, the status management table stores at least 
initial status information of each content management 
unit . 
[0026] 

In the above-mentioned information recording 
medium, the status management table stores initial 
status information and current status information of 
each content management unit. 
[0027] 
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In the above-mentioned information recording 
medium, content use management information table storing 
restriction information associated with content use for 
each content management unit is stored. 
[0028] 

In the above-mentioned information recording 
medium, the content use management information table 
records use restriction information indicative whether 
the content management unit is in network independent 
status or network associated status. 
[0029] 

In the above-mentioned information recording 
medium, the content use management information table has 
information indicative that content is subject to 
control on the basis of externally obtainable operation 
control information . 
[0030] 

In the above-mentioned information recording 
medium, the content use management information table 
includes information for specifying a server for 
obtaining the operation control information. 
[0031] 

In the above-mentioned information recording 
medium, the information recording medium stores content 
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for copy processing or streaming reproduction in 
addition to original content. 
[0032] 

In the above-mentioned information recording 
medium, the content for copy processing or streaming 
reproduction has a different data format than that of 
the original content . 
[0033] 

In carrying out the invention and according to a 
second aspect thereof, an information processing 
apparatus for executing reproduction of content stored 
in an information recording medium includes: 

a unit key acquisition section for identifying a 
content management unit including a data area selected 
for reproduction or execution from content or a program 
stored in the information recording medium so as to 
acquire a unit key corresponding to the identified 
content management unit; and 

a data processing section for decrypting 
encrypted data included in the content management unit 
by use of the unit key selected by the unit key 
acquisition section. 
[0034] 

In the above-mentioned information processing 
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apparatus, the unit key acquisition section is 
configured to detect content management unit switching 
on the basis of a management table in which unit setting 
unit information, content management unit identification 
information, and unit key identification information are 
related with each other and, in accordance with the 
detected information, execute applicable unit key change 
processing . 
[0035] 

The above-mentioned information processing 
apparatus further includes: a renewal key information 
block processing section for executing the unit key 
acquisition processing by decrypting a renewal key 
information block that may be processed only with a key 
stored in an information processing apparatus having a 
legal content use right, the key being set in 
correspondence with the content management unit. 
[0036] 

In the above-mentioned information processing 
apparatus, the renewal key information block acquires 
from an information recording medium or a networked 
server . 
[0037] 

The above-mentioned information processing 
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apparatus further includes: an authentication processing 
section for executing authentication processing with a 
networked server. Upon successful authentication, the 
unit key acquisition section or the data processing 
section acquires information necessary for content 
reproduction including a unit key from the server. 
[0038] 

The above-mentioned information processing 
apparatus further includes: a renewal key information 
block processing section for acquiring an authentication 
key to be applied to authentication processing with a 
networked server by decrypting a renewal key information 
block that may be processed only with a key set in 
correspondence with the content management unit and 
stored in an information processing apparatus having a 
legal content use right; and an authentication 
processing section for authenticating a server by 
applying the authentication key obtained by the 
processing by the renewal key information block 
processing section. Upon successful authentication, the 
unit key acquisition section or the data processing 
section acquires information necessary for content 
reproduction including a unit key from the server. 
[0039] 
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In the above-mentioned information processing 
apparatus, the data processing section determines 
whether the content management unit is in network 
independent status or network associated status and 
executes content use control in accordance with a 
decision. 
[0040] 

In the above-mentioned information processing 
apparatus, the content use control is executed on the 
basis of a content use management information table 
storing control information associated with use of each 
the content management unit . 
[0041] 

In the above-mentioned information processing 
apparatus, the data processing section receives 
operation control information corresponding to content 
stored in the information recording medium from the 
networked server and, in accordance with control based 
on the received operation control information, 
reproduces or copies the content stored in the 
information recording medium. 
[0042] 

In the above-mentioned information processing 
apparatus, the data processing section notifies a 
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networked server of at least one of user identifier, 
information processing apparatus identifier, and 
information recording medium identifier, receives 
operation control information corresponding to the 
notified identifier from the networked server, and, in 
accordance with control based on the received operation 
control information, reproduces or copies content stored 
in the information recording medium. 
[0043] 

In carrying out the invention and according to a 
third aspect thereof, an information processing method 
for reproducing content or executing a program stored in 
an information recording medium, includes the steps of: 

identifying a content management unit including 
a data area selected for reproduction or execution from 
the content or the program stored in the information 
recording medium; 

selecting a unit key corresponding to the 
identified content management unit; and 

decrypting encrypted data included in the 
content management unit to perform content reproduction 
processing or program execution processing by use of the 
selected unit key. 
[0044] 
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The above-mentioned information processing 
method further includes the step of detecting content 
management unit switching on the basis of a management 
table in which unit setting unit information, content 
management unit identification information, and unit key- 
identification information are related with each other 
and, in accordance with the detected information, 
executing applicable unit key change processing. 
[0045] 

The above-mentioned information processing 
method further includes the step of: executing unit key 
acquisition processing by decrypting a renewal key 
information .block that may be processed only with a key 
stored in an information processing apparatus having a 
legal content use right, the key being set in 
correspondence with the content management unit . 
[0046] 

In the above-mentioned information processing 
method, the renewal key information block acquires from 
an information recording medium or a networked server. 
[0047] 

The above-mentioned information processing 
method further includes the step of executing 
authentication processing with a networked server, and 
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upon successful authentication, acquiring information 
necessary for content reproduction including a unit key 
from the server. 
[0048] 

The above-mentioned information processing 
method further includes the steps of : acquiring an 
authentication key to be applied to authentication 
processing with a networked server by decrypting a 
renewal key information block that may be processed only 
with a key set in correspondence with the content 
management unit and stored in an information processing 
apparatus having a legal content use right; 
authenticating a server by applying the authentication 
key obtained by the processing by the renewal key 
information block processing section; and upon 
successful authentication, acquiring information 
necessary for content reproduction including a unit key 
from the server. 
[0049] 

The above-mentioned information processing 
method further includes the step of determining whether 
the content management unit is in network independent 
status or network associated status and executing 
content use control in accordance with a decision. 
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[0050] 

In the above-mentioned information processing 
method, the content use control is executed on the basis 
of a content use management information table storing 
control information associated with use of each the 
content management unit. 
[0051] 

The above-mentioned information processing 
method further includes the step of receiving operation- 
control information corresponding to content stored in 
the information recording medium from the networked 
server and, in accordance with control based on the 
received operation ^contrrol information, reproducing or 
copying the content stored in the information recording 
medium. 
[0052] 

The above-mentioned information processing 
method further includes the steps of: notifying a 
networked server of at least one of user identifier, 
information processing apparatus identifier, and 
information recording medium identifier; receiving 
operation control information corresponding to the 
notified identifier from the networked server; and, in 
accordance with control based on the received operation 
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control information, reproducing or copying content 
stored in the information recording medium. 
[0053] 

In carrying out the invention and according to a 
fourth aspect thereof, a computer program for 
reproducing content or executing a program stored in an 
information recording medium, includes the steps of: 

identifying a content management unit including 
a data area selected for reproduction or execution of 
the content or the program stored in the information 
recording medium; 

selecting a unit key corresponding to the 
identified content management unit; and 

decrypting encrypted data included in the 
content management unit to perform content reproduction 
processing or program execution processing by use of the 
selected unit key. 
[0054] 

In carrying out the invention and according to a 
fifth aspect thereof, a server for providing a unit key 
to be applied to decryption of content to a reproducing 
apparatus for reproducing content stored in an 
information recording medium, includes: 

a database storing a unit key corresponding to a 
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content management unit; 

an authentication processing section for 
authenticating the reproducing apparatus; and 

a data processing section for providing the unit 
key upon successful authentication in the authentication 
processing section . 
[0055] 

The above-mentioned server further includes: a 
renewal key information block database storing a renewal 
key information block that may be processed only with a 
key stored in an information processing apparatus having 
a legal content use right and holds an authentication 
key for authentication processing as encrypted 
information; and an authentication key database storing 
the authentication key. The authentication processing 
section provides the renewal key information block to a 
reproducing apparatus that executes content reproduction 
and executes authentication processing by applying the 
authentication key acquired from the authentication key 
database . 
[0056] 

It should be noted that the computer program 
according to the present invention may be provided for 
computer systems on which various kinds of program codes 
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are executable, by means of computer-readable storage 
media, communication media, recording media such as CD, 
FD, and MO, or communication media such as networks. 
Provision of these programs in a computer-readable form 
realizes the processing according to the programs on 
computer systems . 
[0057] 

Many other features, advantages, and additional 
objects of the present invention will be detailed by 
following description and the accompanying sheet of 
drawings. It should also be noted that term "system" as 
used herein denotes a logical set of a plurality of 
apparatuses that are not always located in a same 
housing . 
[0058] 

As described and according to embodiments of the 
invention, a plurality of content management units 
corresponding to title, index and other information are 
set as data areas obtained by partitioning stored 
content in an information recording medium storing 
content. Different unit keys that are encryption keys 
are allocated to different content management units. At 
least the content real data included in each content 
management unit is encrypted by use of the unit key 
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corresponding to the content management unit and the 
encrypted data is stored. This novel configuration 
allows content use management on a unit basis; to be 
more specific, the novel configuration allows various 
kinds of content use control such as reproduction 
control, copy control, and so on. According to the 
present invention, content use control may be executed 
on an individual content management unit basis, so that, 
in an information recording medium storing many pieces 
of content for example, each of segmented pieces of 
content may be managed. 
[0059] 

Further, according to embodiments of the 
invention, in an information processing apparatus for 
executing the reproduction of content stored in an 
information recording medium, a content management unit 
including data area selected for reproduction from the 
content stored in the information recording medium is 
identified, a unit key corresponding to the identified 
content management unit is selected, and encrypted data 
included in the content management unit is decrypted by 
use of the selected unit key, thereby reproducing the 
content. This novel configuration allows the reliable 
reproduction of the content in each content management 
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unit. Also, in unit switching, content key switching is 
executed, thereby allowing content reproduction by the 
decryption based on a proper key whenever unit switching 
occurs . 
[0060] 

Still further, according to embodiments of the 
invention, if, in an information processing apparatus 
for executing the reproduction of content stored in an 
information recording medium, a content management unit 
including a data area selected for reproduction from the 
content stored in the information recording medium is 
identified and content reproduction is executed by 
getting a unit key corresponding to the identified 
content management unit, a configuration in which 
operation control information such as copy control 
information and reproduction control information is 
acquired from an externally connected server is realized, 
thereby allowing the processing such as applying renewed 
copy control information. 
[0061] 

Yet further, according to embodiments of the 
invention, if, in an information processing apparatus 
for reproducing content stored in an information 
recording medium, a content management unit including a 
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data area selected for reproduction from the content 
stored in the information recording medium is identified 
and content reproduction is executed by getting a unit 
key corresponding to the identified content management 
unit, a configuration in which operation control 
information such as copy control information and 
reproduction control information corresponding to user 
identifier, reproducing apparatus identifier or 
information recording medium identifier is acquired from 
an externally connected server may be realized, thereby 
executing the processing on the basis of the individual 
operation control corresponding to each user and each 
reproducing apparatus . 

[Best Mode for Carrying out the Invention] 
[0062] 

This invention will be described in further 
detail by way of example with reference to the 
accompanying drawings with respect to an information 
processing apparatus, an information recording medium, 
information processing method, and a computer program 
according to the invention. The description will be 
made in the following order: 

1. Configuration of data stored on information 
recording media 
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2. Exemplary configuration of stored content 

3. Stored content encryption and use management 
conf igur at i on 

4 . Content use management based on network 
independence and connection status 

5 . Content copy management on network 

6. Management information corresponding to each 
content management unit 

7. Exemplary configuration of information 
recording medium reproduction apparatus 

8. Exemplary network configuration 

9. Processing execution sequences 

10 . Necessary information acquisition processing 
in content reproduction 

[0063] 

[1. Configuration of data stored on information 
recording media] 

First, a configuration of data stored on 
information recording media will be described. 
Referring to FIG. 1, an exemplary information recording 
medium is shown on which content applicable with the 
processing according to the present invention is stored. 
Shown here is an example in which information stored on 
a ROM disc is stored, the ROM disc being a content 
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stored disc. 
[0064] 

This ROM disc is a legal content storing 
information recording medium manufactured at a disc 
manufacturing factory under the permission of a so- 
called content right holder having a legal content 
copyright or distribution right. It should be noted 
that, in the following embodiments, a disc- shaped 
recording medium is used an example of information 
recording media; however, it would be apparent to those 
skilled in the art that the present invention is 
applicable configurations based on various other forms 
of information recording media. 
[0065] 

As shown in FIG. 1, an information recording 
medium 100 stores content 101 composed of one or more 
pieces of content (a) , (b) , and so on. The content 
includes various kinds of content such as music data, 
movies, still images, and other image data, game 
programs, and Web content, for example. These pieces of 
content include various forms of information, such as 
the information usable only on the basis of data read 
from the information recording medium 10 0 and the 
information usable on the basis of both the data read 
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from the information recording medium 100 and the data 
provided from servers connected to networks. 
[0066] 

For one or more pieces of stored content 101, a 
management configuration is provided in which each piece 
of content may be managed for use. Details of this use 
management will be described later. The information 
recording medium 100 also stores a disc ID 102 as the 
information for identifying the information recording 
medium 100. 
[0067] 

[2. Exemplary configuration of stored content] 

The following describes an exemplary storage 
format in which content is stored in the information 
recording medium according to the invention with 
reference to FIG. 2. Referring to FIG. 2, there is 
shown a data format in which movie content is stored. 
The movie content is HD (High Definition) movie content 
that is high-definition moving image data for example. 

[0068] 

As shown in FIG. 2, the storage format of moving 
image content has four layers: 

(A) index (title) 210; 

(B) reproduction program (movie object) 220; 
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(c , reproduction section specification me (play "«> 
23 0; and 

(D ) clip (content data file) 240. 

[ ° 0691 - ,*=t-a file) 240 has clips 

The (D) clip (content data file) 

261 and a clip information file 251. 
[0070] 

T he clip information file 251 is a data file 

■ „ th e attribute information associated with the *v 
storing the att^^ 

(R udio Visual, stream file 2S1. 

tr eam file .1 ^ides ««. (M o.in 9 picture Bxperbs 
G roup- T ransport Stream, data for sample and has a d 

multiplexed. A lso, the command information for 
cont rollin g a reproduction apparatus at the time of 
reproduction may be multiplexed. 



[0071] 



Th e (C, reproduction section specification file 
, .ntv of reproduction section 
(play list) 230 has a plurality of P 

deification files ( play lists, 231. 232, and 233 
Each o£ these reproduction section specification files 
( P l ay lists, has a conflation for selects one 
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plurality of AV stream data files included in the clip 
(content data file) 240 and having one or more play 
items for specifying particular data parts of a selected 
AV stream data file as reproduction start and end points. 
When one reproduction section specification file (play 
list) is selected, a reproduction sequence is determined 
for reproduction in accordance with the play item of 
that reproduction section specification file (play list) . 
[0072] 

For example, if the reproduction section 
specification file (play list) 231 is selected for 
content reproduction, particular data areas a to b and c 
to d of the AV (Audio Visual) stream file 261 that is 
the content included in the clip 241 are reproduced 
because a play item 234 related with the reproduction 
section specification file (play list) 231 has 
reproduction start point a and reproduction end point b 
in a clip 241 and a play item 235 has reproduction start 
point c and reproduction end point d in the clip 241. 
[0073] 

The (B) reproduction program (movie object) 22 0 
has reproduction programs 221 through 224 that are movie 
objects. The reproduction programs 221 through 224 are 
content reproduction programs that programmably provide 
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capabilities necessary for presenting reproduction 
content (HD movie content) , such as the specification of 
a reproduction section specification file (play list) to 
be reproduced, the response to the operation information 
associated with content reproduction processing entered 
by user, the jump between titles, and the branch of 
reproduction sequence. The reproduction programs 221 
through 224 may jump to each other. In accordance with 
the specification by user or a preset program, a 
reproduction program to be actually executed is selected 
and the reproduction content is selected from the clip 
240 for reproduction by the reproduction section 
specification file (play list) 230 specified by the 
selected reproduction program. 
[0074] 

The (A) index (title) 210 is a content title 
that is presented onto a display that executes content 
reproduction, for example. This index is recognizable 
by user and used as an index for starting the 
reproduction of content. In the figure, a plurality of 
titles 211 through 213 are shown; the user may determine 
a subject of reproduction by selecting any of these 
titles . 
[0075] 
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As shown, the titles 211 through 213 are related 
with the reproduction programs (movie objects) 221, 223, 
and 224 respectively. When the user selects one title, 
the reproduction processing based on the reproduction 
program related with the selected title starts. It 
should be noted that, in addition to normal titles, 
there are titles that are automatically reproduced when 
information recording media are set and started and 
titles for menu display. 
[0076] 

Referring to FIG. 3, an exemplary format is 
shown as an example of a format for storing content into 
the recording medium according to the invention, for 
recording game content and Web content for example. The 
structures of the (D) clip 240 and the (C) reproduction 
section specification file (play list) 230 are the same 
as that of the format of the HD (High Definition) movie 
content that is high definition moving image data 
described with reference to FIG. 2. 
[0077] 

Unlike the format of HD (High Definition) movie 
content that is the high definition moving image data 
described with reference to FIG. 2, the (A') application 
300 is configured as a layer in which both application 
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index data equivalent to title and reproduction programs 
exist together. 
[0078] 

The upper layer (A' ) application 300 contains 
various application indexes such as game 1 311, game 2 
312, WEB 1 313, WEB 2 314, and others 315 using 
application execution capability and reproduction 
programs (objects) 321, 322, 323 and so on as 
application indexes representable to user. These 
reproduction programs include Java programs and HTML 
programs , for example . 
[0079] 

The reproduction programs 321 through 323 
include programs include programs that read, from 
information recording media or networked servers, 
various data files such as image files 331 based on JPEG, 
PNG, and BMP, audio files 332 based on PCM and 
compressed audio, and various data files 333 such as 
texts and databases and execute processing, thereby 
outputting results through a display monitor or a 
speaker . 
[0080] 

These reproduction programs 321 through 323 have 
various configurations corresponding to program 
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categories, such as game and Web presentation for 
example . 
[0081] 

[3 . Stored content encryption and use management 
configuration] 

The following describes, with reference to FIG. 
4, a content management configuration in which content 
stored in an information recording medium is partitioned 
and use control that is different for each partitioned 
content is realized. 

[0082] 

In the present invention, a key (or a unit key) 
that is different to each partitioned content is 
allocated as a basic configuration for realizing the use 
control that is different for each partitioned content. 
A unit in which one unit key is allocated is referred to 
as a content management unit (or a CPS unit) . 
[0083] 

Content belonging to each unit is encrypted by 
use of each unit key and the encrypted content is 
decrypted by use of the key allocated to each unit when 
the content is reproduced for use. Each unit key may be 
individually managed. For example, a unit key to be 
allocated to unit A is set as a key that may be obtained 
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from an information recording medium. A unit key to be 
allocated to unit B may be a key that is obtainable only 
under the condition that the user has accessed a 
networked server and executed a predetermined procedure, 
for example. Thus, the acquisition and management 
configuration of the key corresponding to each unit may 
have an independent form. 
[0084] 

There are two or more units in which one key is 
allocated, namely, there are two or more content 
management unit (CPS unit) setting forms. The following 
describes these forms sequentially. 
[0085] 

(a) Title-based unit setting configuration 
First, with reference to FIG. 4, an example in 
which a content management unit (CPS unit) is configured 
on a title basis will be described. FIG. 4 shows an 
example corresponding to a data format of HD (High 
Definition) movie content that is high-definition moving 
image data described above with reference to FIG. 2. 
[0086] 

The unit setting configuration on a title basis 
shown in FIG. 4 is an example in which content 
management units (CPS units) related with one or more 
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titles are configured. 
[0087] 

In FIG. 4, content management unit (CPS unit) 1 
of 411 is a management unit that is set for title 1 of 
211 and title 2 of 212 and content management unit (CPS 
unit) 2 of 412 is a management unit that is set for 
title 3 of 213 . 
[0088] 

Content management unit (CPS unit) 1 of 411 
contains clip 241 and clip 242 and AV stream data files 
261 and 262 that are real data of the content included 
in these two clips 241 and 242 are encrypted by use of 
encryption key KuT that is set for content management 
unit (CPS unit) 1 of 411. 
[0089] 

In order to execute content reproduction with 
title 1 of 211 or title 2 of 212 specified, the user is 
required to get encryption key Kul that is set as 
related with content management unit (CPS unit) 1 of 411, 
thereby entering a status in which reproduction content 
may be decrypted. 
[0090] 

Content management unit (CPS unit) 2 of 412 
contains clip 243. AV stream data file 263 that is the 
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real data of the content contained in this clip 243 is 
encrypted by use of encryption key Ku2 that is set for 
the content management unit (CPS unit) 2 of 412. 
[0091] 

In order to execute content reproduction with 
title 3 of 213 specified, the user is required to get 
encryption key Ku2 that is set as related with content 
management unit (CPS unit) 2 of 412, thereby entering a 
status in which reproduction content may be decrypted. 
[0092] 

The following describes restriction rules 
necessary in each layer for applying the above-mentioned 
method . 
[0093] 

(1) The reproduction of any AV stream files not 
included in a content management unit (CPS unit) to 
which a particular title belongs is disabled. A 
reproduction program (movie object) that is executed by 
the selection of its title includes a reproduction 
command for only the AV stream file included in the 
content management unit (CPS unit) to which that title 
belongs. 

[0094] 

(2) A reproduction section specification file 
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(play list) may reference two or more different clips 
but these clips must be included in one content 
management unit (CPS unit) . 
[0095] 

Setting these restrictions will not cause a unit 
key change while titles belonging to one content 
management unit (CPS unit) are being reproduced. 
Consequently, seamless connection is made easier for 
reproducing AV streams within a title. 
[0096] 

It should be noted that, because titles are 
information that is apparent to the user, the 
description for the user and the management of content 
are easy when executing key distribution and content 
management on a content management unit (CPS unit) basis 
as will be described later. 
[0097] 

The following describes an example that a 
content management unit (CPS unit) is configured on a 
title basis to satisfy the above-mentioned restriction 
rules, with reference to FIG. 4. In FIG. 4, title 1 of 
211 and title 2 of 212 belong to content management unit 

(CPS unit) 1 of 411. 

[0098] 
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When title 1 of 211 and title 2 of 212 are 
selected, a reproduction program (movie object) to be 
executed first is one of reproduction programs 221 
through 223. These reproduction programs (movie 
objects ) 221 through 223 include a command for 
reproducing only AV stream files belonging to content 
management unit (CPS unit) 1 of 411, namely a command 
for reproducing only AV stream files 261 and 262 
included in the clips 241 and 242 in FIG. 4 and do not 
include a command for reproducing any AV stream files 
belonging to other content management units (CPS units) , 
content management unit (CPS unit) 2 of 412 for example, 
namely, a command for reproducing AV stream file 263 
included in clip 243. 
[0099] 

Reproduction programs 221 through 2 23 are 
related only with reproduction section specification 
files (play lists) 231 and 232 belonging to the same 
content management unit (CPS unit) 1 of 411 and with 
clips 241 and 242 belonging to the same content 
management unit (CPS unit) 1 of 411. If a jump is made 
between reproduction programs (movie objects) belonging 
to the same content management unit (CPS unit) 1 of 411, 
the content becoming subject to reproduction by the 
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execution of that reproduction program (movie object) is 
only clips 241 and 242 belonging to content management 
unit (CPS unit) 1 of 411 and, as far as the same unit 
key Kul is held, these clips may be reproduced and 
involve no such problems as the inability of 
reproduction . 
[0100] 

However, if any of reproduction programs 221 
through 223 includes a command for reproducing an AV 
stream file belonging to another content management unit 

(CPS unit) , content management unit (CPS unit) 2 of 412 
for example, namely AV stream file 263 included in clip 
243, then different unit key Ku2 corresponding to 
content management unit (CPS unit) 2 of 412 becomes 
necessary. Therefore, if unit key Ku2 is not held, an 
error such as stop of reproduction would be caused. 

[0101] 

Consequently, if a title is selected for the 
execution of content reproduction, no AV stream file 
included in a content management unit (CPS unit) to 
which the selected title belongs may be reproduced. 
Thus, any reproduction program (movie object) that is 
executed during the reproduction processing started by 
the selection of a title should not include a command 
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for reproducing any AV stream files not included in the 
content management unit (CPS unit) to which that title 
belongs . 
[0102] 

However, each reproduction program (movie 
object) may have a command for switching between titles, 
namely a title jump command. As indicated by arrow 413 
shown in FIG. 4, reproduction program 223 belonging to 
content management unit (CPS unit) 1 of 411 may have a 
jump command for jumping to any title belonging to 
content management unit (CPS unit) 2 of 412. 
[0103] 

When title switching occurs due to a title jump 
command for example, the reproducing apparatus 
determines that a title change has occurred during 
reproduction . 
[0104] 

In FIG. 4, during the reproduction of title 2 of, 
212, it is practicable to issue a command for jumping to 
title 3 of 213. In this case, after a jump has been 
made, a status in which the reproduction by reproduction 
program 224 specified by title 3 of 213 is executed is 
entered. 
[0105] 
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Although not shown, there is an integrated 
reproduction control program for totally controlling 
content reproduction processing. This integrated 
reproduction control program executes total control on 
content reproduction. To be more specific, this program 
detects the occurrence of switching between content 
management units (CPS units). As shown in FIG. 4, the 
configuration in which title-based content management 
units (CPS units) are set has a content management unit 

(CPS unit) corresponding to each title and a unit key 
information management table "unit configuration and 
unit key management table" as shown in FIG. 5 and 
executes management on the basis of this management 
table. 

[0106] 

It should be noted that the unit configuration 
and unit key management table is a management table in 
which unit setting unit information, content management 
unit identification information, and unit key 
identification information are correlated with each 
other. This table is configured such that unit 
identifiers (CPS1, CPS2 , and so on) as the 
identification information of a content management unit 
corresponding to each title are correlated with 
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identifiers (Kill, Ku2 , and so on) of corresponding unit 
keys. This management table does not store actual unit 
key data. Each unit key for actual use in content 
encryption and decryption is acquired by predetermined 
unit key acquisition processing. This unit key 
acquisition processing will be described later. 
[0107] 

Upon detection of the occurrence of content 
management unit (CPS unit) switching due to title 
switching, the integrated reproduction control program 
executes the switching to a key to be applied by content 
management unit (CPS unit) switching. Alternatively, 
the integrated reproduction control program executes 
message display processing for example, displaying a 
message requesting key acquisition. 
[0108] 

If key Kul for content management unit (CPS 
unit) 1 of 411 and key Ku2 for content management unit 
(CPS unit) 2 of 412 have already been stored in a memory 
of the reproducing apparatus on which content 
reproduction processing is executed, the integrated 
reproduction control program for totally controlling 
content reproduction processing, upon detection of the 
occurrence of content management unit (CPS unit) 
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switching due to title switching, switches between keys 
to be applied, from Kul to Ku2 for example, by content 
management unit (CPS unit) switching. 
[0109] 

If only key Kul for content management unit (CPS 
unit) 1 of 411 has already been stored in a memory of 
the reproducing apparatus on which content reproduction 
processing is executed and key Ku2 for content 
management unit (CPS unit) 2 of 412 has not already been 
stored, then the integrated reproduction control program 
for totally controlling content reproduction processing, 
upon detection of the occurrence of switching to content 
management unit (CPS unit) 2 of 412 by title switching, 
executes processing such as displaying a message 
requesting key acquisition. 
[0110] 

(b) Unit setting configuration based on 
application index 

The following describes an example in which 
content, management units (CPS units) are configured on 
the basis of application index, with reference to FIG. 6. 
[0111] 

The example described above with reference to 
FIG. 4 corresponds to the data format of HD (High 
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Definition) movie content that is high-definition moving 
image data described before with reference to FIG. 2. 
FIG. 6 shows the example corresponding to game content 
and Web content for example described before with 
reference to FIG. 3. 
[0112] 

The above-mentioned upper-layer (A') application 
300 is configured as a layer in which both application 
index data equivalent to a title and reproduction 
programs exist together. 
[0113] 

In this case, the content management unit is set 
as related with application index data such as game 1 of 
311 and WEB 1 of 313, for example. 
[0114] 

In FIG. 6, content management unit (CPS unit) 1 
of 415 is set for game 1 of 311 and WEB 1 of 313 and 
content management unit (CPS unit) 1 of 416 is set for 
game 2 of 312, WEB 2 of 314, and others 315. 
[0115] 

Content management unit (CPS unit) 1 of 415 
includes clip 241 and clip 242 and AV stream data files 
261 and 262 that are real data of the content included 
in these two clips 241 and 242 are encrypted by use of 
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encryption key Kul set for content management unit (CPS 
unit) 1 of 415. 
[0116] 

In order to reproduce the content with game 1 of 

311 or WEB 1 of 313 specified as an application index, 
the user is required to get encryption key Kul set for 
content management unit (CPS unit) 1 of 415, thereby 
entering a status in which decryption of the 
reproduction content is enabled. 

[0117] 

Content management unit (CPS unit) 2 of 416 
includes clip 243. AV stream data file 263 that is real 
data of the content included in this clip 243 is 
encrypted by use of encryption key Ku2 set for content 
management unit (CPS unit) 2 of 416. 
[0118] 

In order to reproduce the content with game 2 of 

312 specified as an application index, the user is 
required to get encryption key Ku2 set for content 
management unit (CPS unit) 2 of 412, thereby entering a 
status in which decryption of reproduction content is 
enabled . 

[0119] 

It should be noted that, as described above, 
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reproduction programs 321 through 32 3 also include 
programs that read, from information recording media or 
networked servers, various data files such as image 
files 331 based on JPEG, PNG, and BMP, audio files 332 
based on PCM and compressed audio, and various data 
files 333 such as texts and databases and execute 
processing, thereby outputting results through a display 
monitor or a speaker. These data files to be read, 
namely image file 331, audio file 332, and data file 333 
are also included in content management unit (CPS unit) 
2 of 412. The data file also is set as the data 
encrypted by unit key Ku2 . 
[0120] 

The restriction rules necessary for each layer 
in applying the above-mentioned method are generally the 
same as those for the title-based unit setting described 
before with reference to FIG. 4, namely the restriction 
rules generally the same as those in the case where 
title is replaced by application index. To be more 
specific, 

(1) No AV stream not included in the content 
management unit (CPS unit) to which an application index 
belongs can be reproduced. A reproduction program 
(object) that is executed by the selection of an 
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application index includes only a reproduction command 
for the AV stream included in the content management 
unit (CPS unit) to which that application index belongs. 

(2) Each reproduction section specification file 
(play list) may reference a plurality of different 
clips; however, the clips that may be referenced are 
those included in one content management unit (CPS unit) . 
[0121] 

Setting the above-mentioned restriction rules 
causes no unit key change during the reproduction of the 
corresponding data of the application index belonging to 
one content management unit (CPS unit) . Consequently, 
seamless connection is made easier for reproducing AV 
streams within one application index. 
[0122] 

Like a title, an application index is apparent 
to the user, so that there is an advantage that the 
description for user and content management are easy 
when executing key distribution and content management 
on a content management unit (CPS unit) basis. 
[0123] 

As described before with reference to FIG. 4, 
the present example also has an integrated reproduction 
control program for totally controlling content 
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reproduction processing. This integrated reproduction 
control program executes total control on content 
reproduction. To be more specific, this program detects 
the occurrence of switching between content management 
units (CPS units) . As shown in FIG. 6, the 
configuration in which application index based content 
management units (CPS units) are set has a content 
management unit (CPS unit) corresponding to each 
application index and a unit key information management 
table "unit configuration and unit key management table" 
as shown in FIG. 7 and executes management on the basis 
of this management table. 
[0124] 

Upon detection of the occurrence of content 
management unit (CPS unit) switching due to application 
index switching, the integrated reproduction control 
program executes the switching to a key to be applied by 
content management unit (CPS unit) switching. 
Alternatively, the integrated reproduction control 
program executes message display processing for example, 
displaying a message requesting key acquisition. 
[0125] 

If key Kul for content management unit (CPS 
unit) 1 of 415 and key Ku2 for content management unit 
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(CPS unit) 2 of 416 have already been stored in a memory 
of the reproducing apparatus on which content 
reproduction processing is executed, the integrated 
reproduction control program for totally controlling 
content reproduction processing, upon detection of the 
occurrence of content management unit (CPS unit) 
switching due to application index switching, switches 
between keys to be applied, from Kul to Ku2 for example, 
by content management unit (CPS unit) switching. 

[0126] 

If only key Kul for content management unit (CPS 
unit) 1 of 415 has already been stored in a memory of 
the reproducing apparatus on which content reproduction 
processing is executed and key Ku2 for content 
management unit (CPS unit) 2 of 416 has not already been 
stored, then the integrated reproduction control program 
for totally controlling content reproduction processing, 
upon detection of the occurrence of switching to content 
management unit (CPS unit) 2 of 416 by application index 
switching, executes processing such as displaying a 
message requesting key acquisition. 
[0127] 

(c) Unit setting configuration based on 
reproduction program (movie object) 
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The following describes an example in which 
content management units (CPS units) are configured 
based on reproduction programs (movie objects) with 
reference to FIG. 8. 
[0128] 

In this case, the content management units are 
set in correspondence with reproduction programs 211 
through 224 for example. 
[0129] 

In FIG . 8, content management unit (CPS unit) 1 
of 421 is set in correspondence with reproduction 
programs 211 through 223 and content management unit 

(CPS unit) 2 of 422 is set in correspondence with 
reproduction program 224. 

[0130] 

Content management unit (CPS unit) 1 of 421 
includes clip 241 and clip 242 and AV stream data files 
261 and 2 62 that are real data of the content included 
in these two clips 241 and 242 are encrypted by use of 
encryption key Kul that is set for content management 
unit (CPS unit) 1 of 421. 
[0131] 

Content management unit (CPS unit) 2 of 422 
includes clip 243 and AV stream data file 263 that is 
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real data included in this clip 243 is encrypted by use 
of encryption key Ku2 that is set for content management 
unit (CPS unit) 2 of 422. 
[0132] 

In order to execute content reproduction by 
selecting one of titles, the user determines a content 
management unit (CPS unit) in accordance with a 
reproduction program to be actually started and may 
decrypt and reproduce content only when the user has a 
unit key corresponding to the determined content 
management unit (CPS unit) . 
[0133] 

The following describes restriction rules 
necessary for each layer when applying the above- 
mentioned method. Unlike the above-mentioned title- 
based unit setting example, there is no relationship 
between title and content management unit (CPS unit) . 
One title may be created so as to reproduce any AV 
stream recorded on a recording medium, provided that the 
following restriction rules be satisfied. 
[0134] 

(1) A reproduction program (movie object) shall 
not include any commands that reproduce any AV stream 
files not included in the content management unit (CPS 
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unit) to which that reproduction program (movie object) 
belongs . 
[0135] 

(2) A reproduction section specification file 
(play list) may reference a plurality of clips; however, 
only those clips included in one content management unit 
(CPS unit) may be referenced. 
[0136] 

As described, a content management unit (CPS 
unit) change is possible during title reproduction. If 
a change occurs, a unit key change occurs. Because no 
unit key change occurs during the execution of a same 
reproduction program (movie object), it is made easy to 
seamlessly connect AV streams during that period. 
[0137] 

To be more specific, in FIG. 8, reproduction 
programs (movie objects) 221 through 223 included in 
content management unit (CPS unit) 1 of 421 may have 
only a command for reproducing AV streams 2 61 and 2 62 
included in content management unit (CPS unit) 1 of 421 
and may have no command for reproducing AV stream file 
263 included in different content management unit (CPS 
unit) 2 of 422. 
[0138] 



S04P1108 



Reproduction section specification files (play 
lists) 231 and 232 included in content management unit 

(CPS unit) 1 of 421 may reference a plurality of clips; 
however, only those clips included in one content 
management unit (CPS unit) may be referenced. 

[0139] 

However, each reproduction program (movie 
object) may have a transition command between 
reproduction programs (movie objects) . As indicated by 
arrows 423 and 424 shown in FIG. 8, each reproduction 
program may have a command for effecting transition 
between reproduction programs (movie objects) belonging 
to different content management unit (CPS units) . 
[0140] 

In the present example also, there is an 
integrated reproduction control program for totally 
controlling content reproduction processing. This 
integrated reproduction control program executes total 
control on content reproduction. To be more specific, 
this program detects the occurrence of switching between 
content management units (CPS units) . As shown in FIG. 
8, the configuration in which reproduction program 
(movie object) based content management units (CPS 
units) are set has a content management unit (CPS unit) 
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corresponding to each reproduction program (movie 
object) and a unit key information management table 
"unit configuration and unit key management table" as 
shown in FIG. 9 and executes management on the basis of 
this management table. 
[0141] 

Upon detection of the occurrence of content 
management unit (CPS unit) switching due to reproduction 
program (movie object) switching, the integrated 
reproduction control program executes the switching to a 
key to be applied by content management unit (CPS unit) 
switching. Alternatively, the integrated reproduction 
control program executes "message display processing for 
example, displaying a message requesting key acquisition. 
[0142] 

If key Kul for content management unit (CPS 
unit) 1 of 421 and key Ku2 for content management unit 
(CPS unit) 2 of 422 have already been stored in a memory 
of the reproducing apparatus on which content 
reproduction processing is executed, the integrated 
reproduction control program for totally controlling 
content reproduction processing, upon detection of the 
occurrence of content management unit (CPS unit) 
switching due to reproduction program (movie object) 
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switching, switches between keys to be applied, from Kul 
to Ku2 for example, by content management unit (CPS 
unit) switching. 
[0143] 

If only key Kul for content management unit (CPS 
unit) 1 of 421 has already been stored in a memory of 
the reproducing apparatus on which content reproduction 
processing is executed and key Ku2 for content 
management unit (CPS unit) 2 of 422 has not already been 
stored, then the integrated reproduction control program 
for totally controlling content reproduction processing, 
upon detection of the occurrence of switching to content 
management unit (CPS unit) 2 of 422 by reproduction 
program (movie object) switching, executes processing 
such as displaying a message requesting key acquisition. 
[0144] 

(d) Unit setting configuration based on 
reproduction section specification file (play list) 
The following describes an example in which 
content management units (CPS units) are configured on a 
reproduction section specification file (play list) 
basis with reference to FIG. 10. 
[0145] 

In this case, content management units (CPS 
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units) are set in correspondence with play lists of 
reproduction section specification files (play lists) 
231 through 233. 
[0146] 

In FIG . 10, content management unit (CPS unit) 1 
of 431 is set in correspondence with reproduction 
section specification files (play lists) 231 and 232 and 
content management unit (CPS unit) 2 of 432 is set in 
correspondence with reproduction section specification 
file (play list) 233. 
[0147] 

Content management unit (CPS unit) 1 of 431 
includes clip 241 and clip 242. AV stream data files 
261 and 262 that are real data of the content included 
in these two clips 241 and 242 are encrypted by use of 
encryption key Kul that is set for content management 
unit (CPS unit) 1 of 431. 
[0148] 

Content management unit (CPS unit) 2 of 432 
includes clip 243. AV stream data file 263 that is real 
data included in this clip 243 is encrypted by use of 
encryption key Ku2 that is set for content management 
unit (CPS unit) 2 of 432. 
[0149] 
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In order to execute content reproduction by 
selecting one of titles, the user determines a content 
management unit (CPS unit) by a reproduction section 
specification file (play list) selected in accordance 
with a reproduction program to be actually started and 
may decrypt and reproduce content only when the user has 
a unit key corresponding to the determined content 
management unit (CPS unit) . 
[0150] 

The following describes restriction rules 
necessary for each layer when applying the above- 
mentioned method. There is no relationship between 
title and reproduction program (movie object), and 
content management unit (CPS unit) . Each title and 
reproduction program (movie object) command may be 
created so as to reproduce any AV stream recorded to a 
recording medium, provided that the following 
restriction rules be satisfied. 
[0151] 

(1) Each reproduction section specification file 
(play list) may reference a plurality of clips; however, 
only those clips included in one content management unit 
(CPS unit) may be referenced. 
[0152] 
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This restriction rule may cause a content 
management unit (CPS unit) change during title 
reproduction. If this change occurs, a unit key change 
occurs. Because no unit key change occurs during the 
execution of a same reproduction section specification 
file (play list) , it is made easy to seamlessly connect 
AV streams during that period. 
[0153] 

To be more specific, in FIG. 10, reproduction 
section specification files (play lists) 231 and 232 
included in content management unit (CPS unit) 1 of 421 
may reference a plurality of clips; however, the clips 
to be referenced are only those included in one content 
management unit (CPS unit) . 
[0154] 

In the present configuration, each reproduction 
program may have a reproduction command with any play 
list specified as indicated by arrow 433 shown in FIG. 
10 . 

[0155] 

In the present example also, there is an 
integrated reproduction control program for totally 
controlling content reproduction processing. This 
integrated reproduction control program executes total 
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control on content reproduction. To be more specific, 
this program detects the occurrence of switching between 
content management units (CPS units) . As shown in FIG. 
10, the configuration in which content management units 
(CPS units) based on reproduction section specification 
file (play list) are set has a content management unit 
(CPS unit) corresponding to each reproduction section 
specification file (play list) and a unit key 
information management table "unit configuration and 
unit key management table' 7 as shown in FIG. 11 and 
executes management on the basis of this management 
table . 
[0156] 

Upon detection of the occurrence of content 
management unit (CPS unit) switching due to reproduction 
section specification file (play list) switching, the 
integrated reproduction control program executes the 
switching to a key to be applied by content management 
unit (CPS unit) switching. Alternatively, the 
integrated reproduction control program executes message 
display processing for example, displaying a message 
requesting key acquisition. 
[0157] 

If key Kul for content management unit (CPS 
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unit) 1 of 431 and key Ku2 for content management unit 
(CPS unit) 2 of 432 have already been stored in a memory 
of the reproducing apparatus on which content 
reproduction processing is executed, the integrated 
reproduction control program for totally controlling 
content reproduction processing, upon detection of the 
occurrence of content management unit (CPS unit) 
switching due to reproduction section specification file 

(play list) switching, switches between keys to be 
applied, from Kul to Ku2 for example, by content 
management unit (CPS unit) switching. 

[0158] 

If only key Kul for content management unit (CPS 
unit) 1 of 431 has already been stored in a memory of 
the reproducing apparatus on which content reproduction 
processing is executed and key Ku2 for content 
management unit (CPS unit) 2 of 432 has not already been 
stored, then the integrated reproduction control program 
for totally controlling content reproduction processing, 
upon detection of the occurrence of switching to content 
management unit (CPS unit) 2 of 432 by reproduction 
section specification file (play list) switching, 
executes processing such as displaying a message 
requesting key acquisition. 
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[0159] 

(e) Unit setting configuration based on AV 
stream file 

The following describes an example in which 
content management units (CPS units) are configured on 
an AV stream file basis with reference to FIG. 12. AV 
stream file basis denotes generally the same as clip 
unit . 
[0160] 

In this case, content management units are set 
in correspondence with clips 241 through 243. 
[0161] 

In FIG. 12, content management unit (CPS unit) 1 
of 441 is a management unit set in correspondence with 
clips 241 and 242 and content management unit (CPS unit) 

1 of 442 is a management unit set in correspondence with 
clip 243. 

[0162] 

Content management unit (CPS unit) 1 of 441 
includes clip 241 and clip 242. AV stream data files 

2 61 and 2 62 that are real data of the content included 
in these two clips 241 and 242 are encrypted by use of 
encryption key Kul set in correspondence with content 
management unit (CPS unit) 1 of 441. 
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[0163] 

Content management unit (CPS unit) 2 of 442 
includes clip 243. AV stream data file 263 that is real 
data of the content included in this clip 243 is 
encrypted by use of encryption key Ku2 set in 
correspondence with content management unit (CPS unit) 2 
of 442. 
[0164] 

In order to execute content reproduction by 
selecting one of titles, the user determines a content 
management unit (CPS unit) by a reproduction section 
specification file (play list) selected in accordance 
with a reproduction program to be actually started and 
may decrypt and reproduce content only when the user has 
a unit key corresponding to the determined content 
management unit (CPS unit) . 
[0165] 

In the application of the above-mentioned method, 
there is no relationship between title, reproduction 
program (movie object) , and the reproduction section 
specification, and content management unit (CPS unit) . 
This method allows the creation of titles, reproduction 
program (movie object) commands, and reproduction 
section specification files (play lists) so as to 
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reproduce any AV stream recorded to a recording medium. 
Each reproduction section specification file (play list) 
may reference a plurality of clips and also may 
reference clips included in different content management 
units (CPS units) . 
[0166] 

However, if there is a content management unit 
(CPS unit) change in a reproduction section 
specification file (play list) , the seamlessly connected 
reproduction of AV streams is restricted because of the 
occurrence of a unit key change. 
[0167] 

In the present example also, there is an 
integrated reproduction control program for totally 
controlling content reproduction processing. This 
integrated reproduction control program executes total 
control on content reproduction. To be more specific, 
this program detects the occurrence of switching between 
content management units (CPS units) . As shown in FIG. 
12, the configuration in which content management units 
(CPS units) based on clips are set has a content 
management unit (CPS unit) corresponding to clips and a 
unit key information management table "unit 
configuration and unit key management table" as shown in 
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FIG. 13 and executes management on the basis of this 
management table . 
[0168] 

Upon detection of the occurrence of content 
management unit (CPS unit) switching due to clip 
switching, the integrated reproduction control program 
executes the switching to a key to be applied by content 
management unit (CPS unit) switching. Alternatively, 
the integrated reproduction control program executes 
message display processing for example, displaying a 
message requesting key acquisition. 
[0169] 

If key Kul for content management unit (CPS 
unit) 1 of 441 and key Ku2 for content management unit 
(CPS unit) 2 of 442 have already been stored in a memory 
of the reproducing apparatus on which content 
reproduction processing is executed, the integrated 
reproduction control program for totally controlling 
content reproduction processing, upon detection of the 
occurrence of content management unit (CPS unit) 
switching due to clip switching, switches between keys 
to be applied, from Kul to Ku2 for example, by content 
management unit (CPS unit) switching. 
[0170] 
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If only key Kul for content management unit (CPS 
unit) 1 of 441 has already been stored in a memory of 
the reproducing apparatus on which content reproduction 
processing is executed and key Ku2 for content 
management unit (CPS unit) 2 of 442 has not already been 
stored, then the integrated reproduction control program 
for totally controlling content reproduction processing, 
upon detection of the occurrence of switching to content 
management unit (CPS unit) 2 of 442 by clip switching, 
executes processing such as displaying a message 
requesting key acquisition. 
[0171] 

- (f) Configuration in which application and 

content are independent CPS units 

The following describes an exemplary 
configuration in which an application and content are 
independent CPS units with reference to FIG. 14. 
[0172] 

As shown in FIG. 14, the above-mentioned upper- 
layer (A') application 300 is configured as a layer in 
which both application index files and reproduction 
program files exist together. This configuration is 
generally the same as that described before with 
reference to FIG. 6. 
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[0173] 

Content management units (CPS units) are set as 
individual units in upper and lower layers of upper- 
layer (A') application (index + reproduction program) 
300 and lower-layer (C) reproduction section 
specification file (play list) + (D) clip (content data 
file) . 
[0174] 

In FIG. 14, content management unit (CPS unit) 1 
of 451 and content management unit (CPS unit) 2 of 452 
are each configured by a lower-layer (C) reproduction 
section specification file (play list) + (D) clip 

(content data file). Content management unit (CPS unit) 
3 of 453 and content management unit (CPS unit) 4 of 454 
are each configured by upper-layer (A') application 

(index + reproduction program) . 

[0175] 

Content management unit (CPS unit) 1 of 4 51 
includes play list 231, play list 232, clip 241 and clip 
242 and AV stream data files 261 and 262 that are real 
data of the content included in these two clips 241 and 
242 are encrypted by use of encryption key Kul set for 
content management unit (CPS unit) 1 of 451. 
[0176] 
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Content management unit (CPS unit) 2 of 452 
includes play list 233 and clip 243 and AV stream data 
263 that is real data of content included in clip 243 is 
encrypted by use of encryption key Ku2 set for content 
management unit (CPS unit) 2 of 452. 
[0177] 

Content management unit (CPS unit) 3 of 453 is a 
CPS unit that is set in correspondence with an 
application configured by application index files 
included in upper-layer (A') application (index + 
reproduction program) 300, namely, game 1 of 311, WEB 1 
of 313, and others not shown, and reproduction programs 
321 and 322 related with the indexes. 
[0178] 

The application configured by the particular 
application index files and reproduction programs shown 
is set as content management unit (CPS unit) 3 of 4 53 
and encrypted by use of encryption key Ku3 set for 
content management unit (CPS unit) 3 of, 453. 
[0179] 

Like content management unit (CPS unit) 3 of 453, 
content management unit (CPS unit) 4 of 454 is also a 
CPS unit that is set in correspondence with an 
application included in upper-layer (A') application 
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(index + reproduction program) 300. 
[0180] 

Content management unit (CPS unit) 4 of 454 is 
set as a unit that includes an application configured by 
game 2 of 312, WEB 2 of 314, and other index 315 as 
application index files and various data files 
obtainable by reproduction program 323 from information 
recording media or networked servers, namely data files 
as application source files for use at execution of 
application index files or application execution files 
for example, to be more specific, image file 331 based 
on JPEG, PNG, or BMP, audio file 332 based on PCM or 
compressed audio, and various data files 333 such as 
text and database files. 
[0181] 

Content management unit (CPS unit) 4 of 454 is 
encrypted by use of encryption key Ku4 set for content 
management unit (CPS unit) 4 of 454. 
[0182] 

For example, in order to execute an application 
execution file corresponding to an application 
corresponding to upper-layer (A') application (index + 
reproduction program), game 1 of 311 or WEB 1 of 313 as 
an application index for example, the user is required 
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to get encryption key Ku3 set for content management 
unit (CPS unit) 3 of 453, thereby executing the 
application . 
[0183] 

Further, in order to reproduce content data 
included in lower- layer (C) reproduction section 
specification file (play list) + (D) clip (content data 
file) , the user is required to get a new CPS unit key 
because these files are set as another content 
management unit (CPS unit) . 
[0184] 

In order to reproduce AV stream 261, the user is 
required to get encryption key Kul set for content 
management unit (CPS unit) 1 of 451. 
[0185] 

It is practicable to arrange a configuration in 
which to provide each data file or program file by 
storing only lower-layer (C) reproduction section 
specification file (play list) + (D) clip (content data 
file) into an information recording medium and receiving 
upper-layer (A') application (index + reproduction 
program) file only from a networked server without 
storing in an information recording medium. 
[0186] 
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For example, under the condition that the usage 
fee of content has been paid, it is practicable to 
provide the user with upper-layer (A') application 

(index + reproduction program) file and a CPS unit key 
corresponding thereto. 

[0187] 

Conversely, it is also practicable to arrange a 
configuration in which only upper-layer (A') application 
(index + reproduction program) file is stored in an 
information recording medium and lower -layer (C) 
reproduction section specification file (play list) + 
(D) clip (content data file) is provided from a content 
server . 
[0188] 

Restriction rules necessary when the above- 
mentioned method is applied are that, before executing 
an application index file or an application execution 
file included in " (A' ) application, a unit key 
corresponding to a CPS unit to which the application 
index file or the application execution file belongs 
must be obtained to decrypt the file, thereby extending 
the decrypted file into the memory. 
[0189] 

If an application resource file necessary for 
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the execution of an application execution file is 
encrypted with a CPS unit key, the application resource 
file must also be decrypted by the CPS unit key. 
[0190] 

Then, during the execution of an application, 
any desired play lists recorded on a recording medium 
may be reproduced. A play list may reference a 
plurality of clips, but the clips to be referenced are 
only those included in one CPS unit. 
[0191] 

Setting these restrictions allows a change of 
CPS units associated with AV streams during application 
execution. If this change occurs, a unit key change 
occurs . Because no unit key change occurs in a same 
play list, it is made easy to seamlessly connect AV 
streams during that period. 
[0192] 

It should be noted that, in the example shown in 
FIG. 14, keys (Kul, Ku2) for encrypting AV streams are 
different from keys (Ku3, Ku4) for encrypting 
application files; it is also practicable to use same 
keys for encryption by including AV stream application 
files into a same CPS unit. 
[0193] 
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As with the above-mentioned examples, there is 
an integrated reproduction control program for totally- 
controlling content reproduction processing in the 
present example. This integrated reproduction control 
program executes total control on content reproduction. 
To be more specific, this program detects the occurrence 
of switching between content management units (CPS 
units). As shown in FIG. 14, the configuration in which 
content management units (CPS units) are set by making a 
distinction between upper-layer application file and 
lower- layer data file including content has content 
management units (CPS units) corresponding to 
application index files or reproduction section 
specification files (play lists) and a unit key 
information management table (unit configuration and 
unit key management tables) as shown in FIG. 15, thereby 
executing management on the basis of these management 
tables . 
[0194] 

Upon detection of the occurrence of content 
management unit (CPS unit) switching due to application 
index switching, the integrated reproduction control 
program executes the switching to a key to be applied by 
content management unit (CPS unit) switching. 
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Alternatively, the integrated reproduction control 
program executes message display processing for example, 
displaying a message requesting key acquisition. 
[0195] 

If key Ku3 for content management unit (CPS 
unit) 3 of 453 corresponding to upper-layer application 
file and key Kul for content management unit (CPS unit) 
1 of 451 corresponding to lower-layer real content have 
already been stored in the reproducing apparatus on 
which content reproduction processing is executed, the 
integrated reproduction control program for totally 
controlling content reproduction processing, upon 
detection of a content file reproduction request during 
execution of the upper- layer application file, switches 
between keys to be applied, from Ku3 to Kul for example, 
by content management unit (CPS unit) switching. 
[0196] 

If key Ku3 for content management unit (CPS 
unit) 3 of 4 53 corresponding to an upper- layer 
application file has already been stored in the 
reproduction apparatus on which content reproduction is 
executed, but key Kul for content management unit (CPS 
unit) 1 of 451 corresponding to lower-layer real content 
has not, then the integrated reproduction control 
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program for totally controlling content reproduction 
processing, upon detection of a content file 
reproduction request during the execution of the upper - 
layer application file, detects switching to content 
management unit (CPS unit) 1 of 451 and executes the 
processing such as message display for requiring key 
acquisition. 
[0197] 

(g) Layer structure for concurrently handling 
titles for use for movie content and applications such 
as game content and Web content 

The following describes a layer structure for 
concurrently haridTing titles for use for movie content 
and applications such as game content and Web content 
and an exemplary configuration of each content 
management unit (CPS unit) set in this layer structure. 
[0198] 

An exemplary moving image content storage format 
was described above with reference to FIGS. 2 and 3. 
The layer structure shown in FIG. 2 has: 

(A) index (title) ; 

(B) reproduction program (movie object) ; 

(C) reproduction section specification file 
(play list) ; and 
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(D) clip (content data file) . 
The layer structure shown in FIG. 3 has: 
(A') application (index + reproduction program); 

(C) reproduction section specification file 
(play list) ; and 

(D) clip (content data file) . 

[0199] 

Referring to FIG. 16, there is shown an 
exemplary layer configuration for concurrently handling 
titles for use for movie content for example and 
applications such as game content and Web content. 

The lower- layer configuration made up of 

(D) reproduction section specification file 
(play list) and 

(D) clip (content data file) 
is substantially the same as the configurations shown in 
FIGS. 2 and 3. The configuration shown in FIG. 16 has 
the upper layer that is 

(A") application 370. (A") application 370 is 
set a layer having 

a. a combination of application index files 371 
and 3 72 and reproduction programs 3 81 and 3 82 or 

b. a combination of application execution files 
373 and 374 such as game content and Web content, 
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programs, and reproduction programs 3 83 and 3 84 or 

one of the above-mentioned combinations a and b. 

[0200] 

It should be noted that application execution 
files 373 and 374 and application index file 371 may 
include an application resource file for use in 
application execution. Also, various data files capable 
of acquiring from information recording media or network 
connection servers such as image files 331 based on JPEG, 
PNG, and BMP for example, audio files 332 based on PCM 
and compressed audio, and various data files 333 such as 
text and database may be applied as application resource 
files . 
[0201] 

a. The configuration of index and reproduction 
program is substantially the same as that described 
before with reference to FIG. 3; namely, the 
configuration is provided as a layer in which both 
application index file data equivalent to title and 
reproduction programs exist together. 

[0202] 

b. A specific example of a combination of 
application execution programs such as game content and 
Web content and reproduction programs is a configuration 
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including game content having application execution 
capabilities and Web content such as HTML; to be more 
specific, a configuration that enables the starting of a 
reproduction program by the execution of a program 
included in game content or Web content such as HTML. 
[0203] 

Programs configuring an application execution 
file included in application 370 are various programs 
set for referencing lower-layers of play list and clip 
and independent set not for referencing the play list 
layer and the clip layer, for example. 
[0204] 

FIG. 17 shows a setting example of content 
management units (CPS units) in the layer configuration 
shown in FIG. 16. 
[0205] 

As shown in FIG. 17, in the setting 
configuration of content management units (CPS units) in 
the present configuration, CPS units including 
application index files such as one or more titles 1 of 
371 and 2 of 372 included in application 370 or 
application execution files such as application 
execution files 373 and 374 are set. 
[0206] 
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As with CPS unit 1 of 461 shown in FIG. 17, 
application index files, reproduction program files, 
play lists, and AV stream files that are content real 
data may be configured into one unit. As with CPS unit 
2 of 462, an application execution file, a reproduction 
program file, a play list, and AV stream files that are 
content real data may be configured into one unit. 
[0207] 

As with CPS unit 3 of 463 shown in FIG. 17, 
application execution files, a reproduction program file, 
and data files obtainable from information recording 
media or networked servers may be configured into one 
unit . 
[0208] 

Each of the above-mentioned units is encrypted 
by use of same keys (CPS unit keys: Kul, Ku2 , and Ku3 
shown in FIG. 17) for storage. 
[0209] 

In FIG. 17, each of content management unit (CPS 
unit) 1 of 461 and content management unit (CPS unit) 2 
of 462 is configured by upper-layer (A" ) application and 
lower-layer (C) reproduction section specification file 
(play list) + (D) clip (content data file) . Content 
management unit (CPS unit) 3 of 4 63 is configured by 
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upper-layer (A") application layer and various data 
files obtainable from information recording media and 
networked servers, without lower-layer (C) reproduction 
section specification file (play list) + (D) clip 
(content data file) . 
[0210] 

Content management unit (CPS unit) 1 of 461 
includes title 1 of 371 and title 2 of 372, reproduction 
programs 381 and 382, play lists 231 and 323, and clips 

241 and 242. AV stream data files 261 and 262 that are 
content real data included in these two clips 241 and 

242 are encrypted by use of encryption key Kul set for 
content management unit (GPS -unit) 1 of 461. 

[0211] 

Content management unit (CPS unit) 2 of 462 
includes application file 373 configured by game content 
and Web content, reproduction program 383, play list 233, 
and clip 243. AV stream data file 263 that is content 
real data included in clip 243 is encrypted by use of 
encryption key Ku2 set for content management unit (CPS 
unit) 2 of 452. Application file 373 may also be 
encrypted by use of encryption key Ku2 . 
[0212] 

Content management unit (CPS unit) 3 of 463 is 
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set as a unit that includes application files 374 and 
375 included in upper-layer (A"), reproduction program 
383, and various data files obtainable by reproduction 
program 383 from information recording media and 
networked servers such as image file 331 based on JPEG, 
PNG, and BMP, audio file 332 based on PCM and compressed 
audio, and various data files 333 such as text and 
database . 
[0213] 

Content management unit (CPS unit) 3 of 4 63 is 
encrypted by use of encryption key Ku3 set for content 
management unit (CPS unit) 3 of 463. 
[0214] 

For example, in order to execute application 
file or content reproduction processing for content 
management unit 1 of 461, the user is required to get 
encryption key Kul set for content management unit (CPS 
unit) 1 of 461 to execute the application, thereby 
reproducing content . 
[0215] 

For example, in order to use application files 
corresponding to content management unit 3 of 4 63 or 
image file 331 associated with the reproduction program 
383, audio file 332 based on PCM and compressed audio, 

83 



S04P1108 



and various data files 333 such as text and database 
associated with reproduction program 3 83, the user is 
required to get encryption key Ku3 set for content 
management unit (CPS unit) 3 of 463, thereby executing 
the application or various files. 
[0216] 

Restriction rules in the execution of processing 
with the above-mentioned method applied are that, while 
a particular title is being reproduced, any AV stream 
files not included in the CPS unit to which that title 
belongs may not be reproduced. A movie object that is 
executed during title reproduction shall not include any 
commands for reproducing any AV streams not included in 
the CPS unit to which that title belongs. It should be 
noted that each movie object may have a command for 
title switching and the reproducing apparatus determines 
a change taking place on the title being reproduced when 
title switching is caused by a title jump command for 
example. It is practicable to execute a command for 
causing jump to title 3 during reproduction of title 2 
in FIG. 17. In this case, after jump, title 3 is being 
reproduced . 
[0217] 

A play list may reference a plurality of clips, 
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but the clips to be referenced are only those included 
in one CPS unit. 
[0218] 

These restrictions prevent a unit key change 
from occurring while titles belonging to one CPS unit 
are reproduced. This makes it easy to seamlessly 
connect AV streams in each title. 
[0219] 

It should be noted that, because each title is 
information apparent to the user, the above-mentioned 
configuration is advantageous in that, in the execution 
of key distribution and content management on a CPS unit 
basis, the description for the user and content 
management may be executed with ease. 
[0220] 

As with title reproduction, seamless connection 
is made easy while AV streams belonging to one CPS unit 
are reproduced when referencing a play list during 
application execution. Encrypting, by use of a same 
encryption key, resource files to be used during the 
execution of one application prevents an encryption key 

(CPS unit key) change from occurring during application 
execution, thereby allowing smooth encryption processing. 

[0221] 
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As with the above-mentioned examples, there is 
an integrated reproduction control program for totally- 
controlling content reproduction processing in the 
present example. This integrated reproduction control 
program executes total control on content reproduction. 
To be more specific, this program detects the occurrence 
of switching between content management units (CPS 
units). As shown in FIG. 18, the configuration has 
content management units (CPS units) corresponding to 
application-layer index files or application files and a 
unit key information management table (unit 
configuration and unit key management tables) , thereby 
executing management on the basis of these management 
tables . 
[0222] 

Upon detection of the occurrence of content 
management unit (CPS unit) switching due to application 
index switching, the integrated reproduction control 
program executes the switching to a key to be applied by 
content management unit (CPS unit) switching. 
Alternatively, the integrated reproduction control 
program executes message display processing for example, 
displaying a message requesting key acquisition. 
[0223] 

86 



S04P1108 



If key Kul for content management unit (CPS 
unit) 1 of 461 and key Ku2 for content management unit 

(CPS unit) 2 of 462 have already been stored in the 
reproducing apparatus on which content reproduction 
processing is executed, the integrated reproduction 
control program for totally controlling content 
reproduction processing, upon detection of application 
unit switching or content switching, switches between 
keys to be applied, from Kul to Ku2 for example, by 
content management unit (CPS unit) switching. 

[0224] 

If key Kul for content management unit (CPS 
unit) 1 of 461 has already been stored in the 
reproduction apparatus on which content reproduction is 
executed, but key Ku2 for content management unit (CPS 
unit) 2 of 4 62 has not, then the integrated reproduction 
control program for totally controlling content 
reproduction processing, upon detection of application 
unit switching or content switching, executes the 
processing such as message display for requiring key 
acquisition . 
[0225] 

[4 . Content use management based on network independence 
and connection status] 
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The following describes a configuration in which 
content use management is executed depending on whether 
content is in network independent status or network 
connected status when content is reproduced for use by 
loading, on a reproducing apparatus that is a device 
connected to a network such as a home network, an 
information recording medium containing content 
encrypted by use of a unit key that is an encryption key 
on a unit basis, the content being partitioned into the 
above-mentioned content management units. 
[0226] 

As shown in (A) of FIG. 19, each content 
management unit (CPS unit) recorded on a recording 
medium is one of two statuses; status independent of 
network (or network discrete status) and status 
associated with network (or network bound status) . 
[0227] 

If two or more pieces of content (content 
management units) are recorded on a recording medium, 
the status in which each content management unit (CPS 
unit) is kept is managed. Management information about 
the discrete or bound status for each content management 
unit (CPS unit) is recorded to an information recording 
medium, a player (an information reproduction apparatus) 
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loaded with an information recording medium or a 
management server on a home network executing an 
information management process. 
[0228] 

Content 1 through content 6 shown in FIG. 19 
correspond to content management units (CPS units) , 
respectively. 
[0229] 

The following describes a content reproduction 

method . 

Each piece of content partitioned into content 
management units (CPS units) stored in an information 
recording medium may or may not be reproduced in network 
independent status (discrete status) . 
[0230] 

Content 1 through content 4 shown in FIG. 19 are 
reproducible in network independent status (discrete 
status) and content 5 and content 6 are not reproducible 
in network independent status (discrete status) . 
[0231] 

Each piece of content (content management unit) 
recorded on a recording medium may enter network 
associated status (bound status) by a user operation or 
processing by the reproducing apparatus. It should be 
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noted that there is also content that is disabled to 
enter network associated status (bound status) as 
content 1 shown in (a) of FIG. 19. 
[0232] 

These pieces of information are determined as 
attribute of each piece of content (content management 
unit) stored in an information recording medium and 
stored in an information recording medium as attribute 
information corresponding to each content management 
unit . 
[0233] 

The processing form in which each piece of 
content (content management unit) may be executed is 
predetermined : 

(1) executable in network independent status 

(discrete status) ; or 

(2) executable in network associated status 

(bound status) . 

The information indicative which of these 
processing forms each piece of content is executable is 
recorded on an information recording medium or a 
management server holding management information as the 
attribute information corresponding to each piece of 
content (content management unit) . 
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[0234] 

For example, there are pieces of content 
(content management units) shown in (a) through (f) of 
FIG. 19. 

(a) Content 1 is content (content management 
unit) reproducible in network independent status 
(discrete status) and disabled to move to network 
associated status (bound status) . 

[0235] 

(b) Content 2 is content (content management 
unit) reproducible in network independent status 
(discrete status) and reproducible in streaming 
reproduction using network connection in network 
associated status (bound status) . Streaming 
reproduction denotes content reproduction processing in 
which data recorded to a recording medium or digital 
data obtained by converting data recorded on a recording 
medium is transmitted via network and the transmitted 
data is decoded and displayed on a receiver device. 
[0236] 

(c) Content 3 is content reproducible in network 
independent status (discrete status) and remotely 
reproducible content (content management unit) by use of 
network connection in network associated status (bound 
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status) . Remote reproduction denotes content 
reproduction processing in which a sender device 
executes processing including a response to user 
operations as found in DVD-video interactive content, 
transmitting only video to be displayed on screen and 
audio to be reproduced in a data format displayable on a 
receiver device. Remote reproduction requires user 
operation commands to be received by the receiver device 
and to be sent to the transmitting reproduction 
apparatus via network. 
[0237] 

(d) Content 4 is content reproducible in network 
independent status (discrete status) and content 

(content management unit) that realizes content 
reproduction for reproducing both content recorded on a 
recording medium and data downloaded via network. 

[0238] 

The data to be downloaded may include subtitles, 
audio data, and menu data of languages not stored on a 
recording medium, and the latest version of data for use 
in content reproduction, for example. Content 4 is an 
example of content in which content reproducible also in 
network independent status (discrete status) is 
reproduced along with downloaded data in network 
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associated status (bound status) . 
[0239] 

(e) Content 5 is content (content management 
unit) that is not reproducible in network associated 
status (bound status) and only reproducible in network 
associated status (bound status) . 
[0240] 

The reproduction is enabled when a key necessary 
for reproduction via network, namely, a unit key 
corresponding to a content management unit defined as 
content 5 is obtained. This reproduction enabling 
configuration under the condition of unit key 
acquisition allows the distribution and sale of content 
that is not reproducible in network independent status 

(discrete status) , thereby realizing services of a form 
in which key information is sold by charging at the 
reproduction of the content. 

[0241] 

(f) Content 6 is content (content management 
unit) that is not reproducible in network independent 
status (discrete status) and reproducible only in 
network associated status (bound status) and content 
(content management unit) that realizes content 
reproduction in which both content recorded on a 
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recording medium and data downloaded via network are 
reproduced . 
[0242] 

It should be noted that, with (d) content 4 
through (f) content 6, network connection is executed 
for the processing of acquiring download data or a unit 
key; for the premises of this data and unit key 
acquisition, authentication processing is executed to 
make a confirmation that a data request is by an 
authorized device or user and, if the authentication is 
successful, the download data and unit key are provided 
from the server. It should also be noted that the 
transfer data via network is encrypted before being 
provided to the user device. These processing 
operations will be described later. 
[0243] 

[5. Content copy management on network] 

The following describes a configuration in which 
content copy management is executed depending on whether 
content is in network independent status or network 
connected status when content is reproduced for use by 
loading, on a reproducing apparatus that is a device 
connected to a network such as a home network, an 
information recording medium containing content 
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encrypted by use of a unit key that is an encryption key 
on a unit basis, the content being partitioned into the 
above-mentioned content management units. 
[0244] 

As shown in (A) of FIG. 20, each content 
management unit (CPS unit) recorded on a recording 
medium is one of two statuses; status independent of 
network (or network discrete status) and status 
associated with network (or network bound status) . 
[0245] 

If two or more pieces of content (content 
management units) are recorded on a recording medium, 
the status in which each content management unit (CPS 
unit) is kept is managed. Management information about 
the discrete or bound status for each content management 
unit (CPS unit) is recorded to an information recording 
medium, a player (an information reproduction apparatus) 
loaded with an information recording medium or a 
management server on a home network. 
[0246] 

Content 1 through content 6 shown in FIG. 2 0 
correspond to content management units (CPS units) , 
respectively. Each piece of content (content management 
unit) recorded on a recording medium may enter network 
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associated status (bound status) by a user operation or 
processing by the reproducing apparatus. It should be 
noted that there is also content that is disabled to 
enter network associated status (bound status) as 
content 1 shown in (a) of FIG. 20. 
[0247] 

These pieces of information are determined as 
attribute of each piece of content (content management 
unit) stored in an information recording medium and 
stored in an information recording medium or a 
management server holding management information as 
attribute information corresponding to each content 
management unit. 
[0248] 

The processing form in which each piece of 
content (content management unit) may be executed is 
predetermined : 

(1) executable in network independent status 
(discrete status) ; or 

(2) executable in network associated status 
(bound status) . 

The information indicative which of these 
processing forms each piece of content is executable is 
recorded on an information recording medium or a 
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management server holding management information as the 
attribute information corresponding to each piece of 
content (content management unit) . 
[0249] 

For example, there are pieces of content 
(content management units) shown in (a) through (f) of 
FIG. 20. 

(a) Content 1 is content (content management 
unit) reproducible in network independent status 
(discrete status) and disabled to move to network 
associated status (bound status) . 

[0250] 

(b) Content 2 is content reproducible in network 
independent status (discrete status) and content 
(content management unit) reproducible but not copyable 
in network associated status (bound status) . 

[0251] 

(c) Content 3 is reproducible in network 
independent status (discrete status) and in network 
associated status (bound status) . Further, content 3 is 
content (content management unit) that may be copied to 
a recording medium of the same type of copy source only 
in network associated status (bound status) . 

[0252] 
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Copy destinations may be: 

recording media of the same type as copy source; 
different recording media (within network) ; and 
portable devices. 

Content 3 is content that may be copied to only 
recording media of the same type as copy source. Only 
when the copy destination is found to be a recording 
medium of the same type as the copy source, the copy 
source may send the data recorded on the recording 
medium to the copy destination. 
[0253] 

(d) Content 4 is content reproducible in network 
independent status (discrete status) and reproducible 
also in network associated status (bound status) . 
Further, content 4 is content (content management unit) 
that is enabled for copy to a recording medium of a 
different type from the copy source only in network 
associated status (bound status) . 
[0254] 

In the case of content 4, copy to recording 
media of different types is enabled and it is required 
for the copy source or destination device to execute 
data conversion to record converted copy data as 
necessary. 
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[0255] 

(e) Content 5 is not reproducible in network 
independent status (discrete status) and is reproducible 
also in network associated status (bound status) . 
Further, content 5 is content that is enabled for copy 
to portable devices only in network associated status 

(bound status) . Portable devices may be taken out of a 
home network; therefore, it is necessary for copy 
management to take this portability into account. 

[0256] 

It is necessary to specify the processing to be 
executed if the restrictions associated with copying are 
applied, such as copy count, copy expiration date, and 
nonexistence of an original recording medium from 
network associated status (bound status) for example. 
It is desirable for these pieces of information to be 
specified separately for the above-mentioned three copy 
forms. It should be noted that the processing to be 
executed when an original recording medium gets out of 
network associated status (bound status) may be that the 
copy data be invalidated, the copy data be invalided 
after a certain period of time, or the copy data be 
deleted, for example. The data not deleted may be used 
without change when the recording medium is put in 
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network associated status (bound status) again. 
Consequently, if a recording medium is lend to a friend 
for example, the copy data may only become unavailable 
to the owner for a while and becomes available upon 
returning . 
[0257] 

(f) Content 6 is content not reproducible in 
network independent status (discrete status) and content 
(content management unit) reproducible only in network 
associated status (bound status) . Further, content 6 is 
content (content management unit) with data for copy 
stored on a recording medium in advance, assuming that 
the data for copy be copied on a home network. 
[0258] 

This data for copy may have a format no 
reproducible on the copy source device or have a 
configuration in which, as a result of copying to 
another device, this data becomes reproducible. For 
example, the data for copy of the same contents may 
stored in advance on a recording medium storing data of 
the multi- layer format described before with reference 
to FIGS. 2 and 3 for example, in a data format 
reproducible on general networked devices (for example, 
a file format such as AVI reproducible by a personal 
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computer or MPEG- PS format) and the data for copy thus 
stored is transmitted for copying via network to be 
reproduced by these devices. 
[0259] 

It should be noted that, before copying content, 
authentication or key acquisition via network is 
preferably executed. Also, with systems in which 
billing is executed every time content is copied or a 
key is required for copying, content management 
processing is preferably executed such that the number 
of times content may be copied is restricted by the 
number of times the key is distributed. 
[0260] 

[6. Management information corresponding to each content 

management unit] 

The following describes management information 
corresponding to content management units recorded to 
information recording media that stores content 
encrypted by use of a unit key that is an encryption key 
on a unit basis, the content being partitioned into 
content management units as described before. 
[0261] 

As described above, each content management unit 
(CPS unit) is configured in correspondence with any one 

101 



S04P1108 



of: 

title; 

application index; 
reproduction program; 
play list; and 
clip . 

One unit key is set for each content management 
unit (CPS unit) . 
[0262] 

The content management unit (CPS unit) 
configuration and the key management table have already 
been described before as set as the unit key information 
management table "unit configuration and unit key 
management table" with reference to FIGS. 5, 7, 9, 11, 
and 13 . 
[0263] 

Further, as described before, there is status 
information associated with each content management unit 
(CPS unit) , indicative which of the statuses each 
content management unit (CPS unit) is in: 

a. network independent status (discrete status) 

and 

b. network associated status (bound status) . 
It should be noted that, with information 
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recording media to which data cannot be written, the 
above-mentioned status information is written only in 
the initial status. 
[0264] 

For information recording media enabled for data 
writing, two kinds of information, initial status and 
current status, are recorded. The writing of current 
status information to recording media is executed by an 
information processing apparatus that is a reproducing 
apparatus loaded with an information recording medium or 
by a networked management server. 
[0265] 

Referring to FIG. 21, there is shown an 
exemplary configuration of "status management table" 
with initial status and current status recorded to an 
information recording medium enabled for data writing. 
In this table, the initial status and current status 
corresponding to each content management unit (CPS unit) 
are written in one of (a) network independent status 

(discrete status) and (b) network associated status 

(bound status) . 

[0266] 

It should be noted that the status management 
table shown in FIG. 21 is recorded to information 
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recording media and an information processing apparatus 
that is a reproducing apparatus loaded with an 
information recording medium or an external apparatus 
such as networked management server. 
[0267] 

In the case of recording media disabled for data 
writing, only initial status data is written and a 
status management table recorded with initial status and 
current status is written to an information processing 
apparatus that is a reproducing apparatus loaded with an 
information recording medium or an external apparatus 
such as a networked management server. 
[0268] 

For the initial status to be set to the status 
management table, one of the following four statuses is 
used: 

a. discrete only; 

b. discrete initially; 

c. bound only; and 

d. bound initially. 

[0269] 

u a. discrete only" denotes that content (content 
management unit) is allowed only in network independent 
status (discrete status) and not allowed to shift to 
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network associated status (bound status) . 
[0270] 

"b. discrete initially" denotes that content 
(content management unit) is initially in network 
independent status (discrete status) and allowed to 
shift to network associated status (bound status) . 
[0271] 

"c. bound only" denotes that content (content 
management unit) is allowed only in network associated 
status (bound status) and now allowed to shift to 
network independent status (discrete status) . 
[0272] 

«b - bound initially" denotes that content 
(content management unit) is initially in network 
associated status (bound status) and allowed to shift to 
network independent status (discrete status) . 
[0273] 

The initially network associated status (bound 
status) assumes a situation in which content is 
distributed as associated with information found on 
network in advance. For example, this content includes 
content that is assumed to be reproduced along with the 
information found on network. 
[0274] 
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For the current status, one of network 
independent status (discrete status) and network 
associated status (bound status) is set. 
[0275] 

The current status may bet set for each content 
management unit. Two status management methods are 
possible for the forms of content use management. In 
the first method, the status of each recording medium is 
always returned to initial status before the recording 
medium is put outside a home network. 
[0276] 

For example, if removable media that are 
detachable from a reproducing apparatus are used for 
content storage recording media, the status of each 
piece of content is returned to initial status upon 
unloading the removable medium from the reproducing 
apparatus. In this case, the status management table 
stored outside the recording medium is also initialized. 
[0277] 

In the second method, the status of each 
recording medium is registered in an outside management 
server for example. In this case, it is unnecessary to 
initialize the status management table stored outside 
recording media only when the removable medium is 
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unloaded. 
[0278] 

An attempt to load a removable medium storing 
content put in network associated status (bound status) 
on a reproducing apparatus of home network (A) onto a 
reproducing apparatus connected to home network (B) 
built for another home for example and put this 
removable medium into network associated status (bound 
status) causes a management server to detect, on the 
basis of the status management table, that content in 
network associated status (bound status) in home network 

(A) is to enter network associated status (bound status) 
also redundantly in home network (B) , thereby preventing 
the content from being set to network associated status 

(bound status) on home network (B) . 

[0279] 

The above-mentioned management prevents the same 
piece of content from being used in plural in parallel. 
[0280] 

It should be noted that a management server and 
so on may be configured to have a status management 
table as shown in FIG. 21, thereby allowing reference to 
the current status after unloading of a removal medium 
from a reproducing apparatus for the use management of 
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content on the basis of the referenced status. 
[0281] 

It should also be noted that, if an information 
recording medium is a recordable medium to which the 
current status is recorded, it is practicable to read 
the current status directly from the recording medium 
without checking whether the recording medium is in 
network associated status (bound status) via server 
because the current status is recorded to the recording 
medium, thereby executing the use management content on 
the basis of read information. 
[0282] 

It should also be noted that, in a configuration 
in which the status management information such as 
mentioned above is written in the case of ROM media that 
does not allow repetitive writing to normal data areas, 
it is preferable to form a partially writable area on 
ROM media and use these ROM media having this 
configuration. 
[0283] 

Alternatively, it is preferable to provide a 
configuration in which rewritable optical disc media or 
cartridge media containing an IC memory are used. 
[0284] 
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It should be noted again that the status 
management table shown in FIG, 21 may be configured as 
an information table integrated with a table "unit 
configuration and unit key management table" managing 
the content management unit (CPS unit) configuration and 
the unit key shown in FIGS. 5, 7, 9, 11, and 13 or as an 
independent management table. 
[0285] 

The management information corresponding to 
content management units also include the content 
reproduction and use restriction information when 
content is in network independent status (discrete 
status) and the" content reproduction and use restriction 
information when content is in network associated status 

(bound status) . 

[0286] 

These pieces of content management information 
are written as the attribute information corresponding 
to content onto an information recording medium or 
recorded in a management server that executes content 
management processing. It should be noted that, for the 
content that is allowed for use only in network 
associated status (bound status) , a content use 
management configuration may be taken on the basis of 
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only the content management information recorded in a 
management server . 
[0287] 

The following describes exemplary data of 
content management information with reference to FIG. 22. 
FIG. 22 shows an exemplary configuration of a content 
use management information table with content management 
information recorded in fixed- length data indicative of 
the status of content, namely, whether content is in 
network independent status (discrete status) or network 
associated status (bound status) . 
[0288] 

With content use in a home network taken into 
consideration, the setting of content management 
information of fixed- length as shown in FIG. 22 is 
preferable. For the management information of network 
independent status (discrete status) for example, 
whether reproduction in network independent status 
(discrete status) is enabled or disabled is written. 
For the content not reproducible in network independent 
status (discrete status) , a method of reproducing the 
content is written. For example, this method specifies 
the connection to a key distribution server and the 
acquisition of key data distributed by another medium (a 
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memory card for example) and provides the URL and 
telephone number for example for specifying the server 
or an index value pointing a list that stores these 
pieces of information. 
[0289] 

The management information of network associated 
status (bound status) includes whether copy, streaming, 
and remote reproduction in network are allowed or not, 
the copy count, expiration date , availability of copy 
streaming data, data conversion scheme, and handling of 
copy data to be executed when content gets out of 
network associated status (bound status), for example. 
[0290] 

It should be noted that, because FIG. 22 assumes 
that a part or all of these pieces of information be 
stored in fixed-length fields, the data consisting of 
many characters such as URLs and data position (path 
information) is stored in a separate file and an index 
to a list stored in the separate file is stored in each 
fixed-length field. 
[0291] 

In order to get operation control information at 
the time of reproduction from a server to operate 
accordingly without using the reproduction control 
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information recorded on recording media, a configuration 
may be provided in which a flag indicative of data 
acquisition from a server and information indicative of 
server access method may be stored as indicated by 
content management information configuration data 501 as 
shown in FIG. 2 2 . 
[0292] 

Setting the above-mentioned information as 
content management information allows the change of 
control methods for example after the sale of complex 
control and recording media that cannot be expressed in 
fixed-length data. 
[0293] 

It should be noted that the content use 
management information table shown in FIG. 2 2 may be 
configured as content management units (CPS units) shown 
in FIGS. 5, 7, 9, 11, and 13, an information table 
integrated with a unit key management table, or 
independent management tables. Alternatively, the 
content use management information table may be 
integrated with the status management table shown in FIG. 
21 or may be a separate table. 
[0294] 

Referring to FIG. 23, there is shown an 
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exemplary configuration of a content use management 
information table with content management information 
according to content status recorded in variable -length 
data . 
[0295] 

The contents of the information to be set are 
the same as those shown in FIG. 22. Because variable- 
length information may be entered, data containing many 
characters such as URLs and data positions (path 
information) may be written directly to the content 
management information. In addition, because of a loop 
structure and a type (CCI_and_other_inf or_type in the 
figure) is defined for each type of content management 
information, the later addition of a new copy control 
method may be handled with ease only by defining the 
type and the information accompanying thereto 

(CCI_and_other_inf o__value and Addit ional_inf o in the 
figure) . In this case, any devices sold in the past may 
not execute the processing for unknown types. 

[0296] 

It should be noted that any one of two 
structures may be set in which the content management 
information associated with network independent status 
(discrete status) and network associated status (bound 
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status) is not separated as shown in FIG. 23(A) and 
content management information loops are provided for 
these two statuses as shown in FIG. 23(B). 
[0297] 

This information table may be stored as a same 
file as above-mentioned another management table or as a 
different file. 
[0298] 

In order to get operation control information at 
the time of reproduction from a server to operate 
accordingly without using the reproduction control 
information recorded on recording media, a configuration 
may be provided in which a flag indicative of data 
acquisition from a server and information indicative of 
server access method may be stored as indicated by 
content management information configuration data 502 as 
shown in FIG. 23 . 
[0299] 

Setting the above-mentioned information as 
content management information allows the change of 
control methods for example after the sale of complex 
control and recording media that cannot be expressed in 
fixed-length data. 
[0300] 
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Further, a configuration in which user defined 
information as content management information 
configuration data 503 shown in FIG. 23 is set and a 
type of user definable control information for example 
is set to this user defined information allows the 
content reproduction control corresponding to each 
individual user; for example, this configuration allows 
the reproduction processing only for member users by 
making distinction between member numbers and non-member 
users or sets the definition of copy control information 
(CCI information) independent of recording medium 
standards for example, thereby realizing a control 
method exceeding the scope of standards of recording 
media and a control method that each content distributor 
may define as desired. 
[0301] 

Examples of using copy control information (CCI 
information) based on user definitions include an 
example in which the definitions of copy control 
information (CCI information) independent of recording 
medium standards are set . 
[0302] 

The parameters for example of copy control 
information (CCI information) are standardized for each 
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of particular recording systems (DVD standards for 
example) , so that it is difficult to extend copy control 
information (CCI information) after the popularization 
of the reproducing apparatuses compliant with these 
parameters . 
[0303] 

Consequently, desired control information not 
included in the copy control information (CCI 
information) determined by each recording system is set 
as user defined information and each content owner or 
manager sets unique copy control information (CCI 
information) . 
[0304] 

Because the interpretation of the copy control 
information (CCI information) uniquely set by each 
content owner or manager cannot be done only by standard 
compliant reproducing apparatuses, an application (a 
Java program for example) for interpreting the copy 
control information (CCI information) is stored on a 
recording medium or downloaded from a server or other 
external devices. Thus, execution of the obtained 
application allows the interpretation of uniquely 
defined copy control information (CCI information) and 
the operation control according to the CCI information 
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on each reproducing apparatus. 
[0305] 

The following describes examples of a directory- 
configuration for storing the management information 
corresponding to the above-mentioned types of content 
management units (CPS units) and the management 
information storage setting, with reference to FIG. 24. 
A BDMV directory is a directory for storing application 
files in Blu-ray disc ROM format. 
[0306] 

In FIG. 24, content data section 511 includes 
data files such as content data files of multiple layer 
configurations as described before with reference to 
FIGS. 2 and 3, namely, title, application index, 
reproduction program, play list, and clip. These data 
files are stored in a user data area of each information 
recording medium. It should be noted that an AV stream 
included in each clip is a data file encrypted with a 
unit key that is set for each content management unit 

(CPS unit) . 

[0307] 

A management data section 512 includes content 
management units (CPS units) described before with 
reference to FIGS. 5, 7, 9, 11, and 13 and unit key 
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managed tables, namely, "unit configuration and key 
management table" , "status management table" for 
managing network independent status (discrete status) 
and network associated status (bound status) of each 
content management unit described with reference to FIG. 
21, and "content use management information table" 
storing the information about content use and copy 
control in each of these statuses described with 
reference to FIG. 23. 
[0308] 

These management tables are stored in one of 
several forms . 

(A) Management tables are stored in user data 
areas of recording media as dedicated files. 

(B) Management tables are inserted in AV format 
files stored in user data areas of recording media. For 
example, these management tables are stored by inserting 
them titles, index data files and AV format files such 
as play lists. 

(C) Management tables are stored in the physical 
area of each recording medium, namely, an area that the 
user cannot directly access. 

(D) Management tables are stored in external 

servers . 
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[0309] 

It should be noted that each of the following 

tables : 

"unit configuration and key management table"; 
"status management table" ; and 
"content use management information table" 
may be managed individually or two or more of 

these tables may be managed together. 

[0310] 

In example (B) shown above, the above-mentioned 
three tables are stored in an application file that is 
stored in a user data area of each recording medium. 
Only one of these tables may exist on each recording 
medium, so that the storage position is either a title 
index table file (index. bdmv in the figure) or a 
reproduction program (movie object) file 

(MovieObject .bdmv in the figure). 

[0311] 

In example (C) shown above, the above-mentioned 
three pieces of information are stored in the physical 
area (that the user cannot directly access) on each 
recording medium. In example (D) shown in above, the 
three pieces of information are stored not on a 
recording medium but on an external server for example. 
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In this case, the reproducing apparatus must get the 
information corresponding to the three tables always 
from an external server before starting reproduction of 
the recording medium. 
[0312] 

[7. Exemplary configuration of information recording 
medium reproduction apparatus] 

The following describes an exemplary 
configuration of an information processing apparatus for 
reproducing content stored on the above-mentioned 
information recording medium with reference to FIG. 25. 
[0313] 

First, a configuration of a recording and 
reproducing apparatus 60 0 will be described. Component 
blocks are connected to bus 601. In the reproduction of 
AV stream data consisting of MPEG-TS data, a data read 
from information recording medium 6 91 in a drive 690 is 
decrypted by an encryption processing means 650 as 
necessary to be separated into video, audio, and 
subtitle data for example by a TS (Transport Stream) /PS 

(Program Stream) processing means 620. 

[0314] 

The digital data decoded by an MPEG codec 63 0 is 
converted by a D/A converter 641 in an input and output 
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I/F 64 0 into an analog signal to be outputted. In 
digital outputting, the MPEG-TS data decrypted by the 
encryption processing means 650 is outputted through an 
input and output I/F 610 as digital data. The output in 
this case is directed to an digital interface such as 
IEEE 13 94, Ethernet cable, or wireless LAN, for example. 
It should be noted that, if network connection 
capabilities are provided, the input and output I/F 610 
has network connection capabilities. Also, if the 
reproducing apparatus executes data conversion into a 
format receivable by each output destination device and 
outputs the converted data, the MPEG codec 63 0 executes 
rate conversion and codec conversion on the video, audio 
and subtitle data obtained by the TS/PS processing means 
620, which multiplexes the processed data with MPEG-TS 
or MPEG- PS again, the resultant data being outputted 
through the input and output I/F 610. Alternatively, it 
is practicable to convert the data into a codec and 
multiplexed file other than MPEG by use of a CPU 670 and 
output the resultant data through the input and output 
I/F 610. 
[0315] 

If the above-mentioned management tables, namely, 
"unit configuration and key management table" ; 
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"status management table" ; and 
"content use management information table" 
are stored in the information recording medium 
691, then these tables are read therefrom and stored in 
a memory 680. Key information for each content 
management unit (CPS unit) necessary for reproduction 
may be obtained from the data stored in the memory 680. 
It should be noted that if the management tables and 
unit keys are not stored in an information recording 
medium, they may be obtained from a networked server 
through a predetermined procedure. This procedure will 
be described later. 
[0316] 

As described before, each content management 
unit (CPS unit) is configured as related with any one of 
title; 

appl icat ion index ; 
reproduction program; 
play list; and 
clip . 

To one content management unit (CPS unit) , one 
unit key is related. The integrated reproduction 
control program for totally executing control of content 
reproduction detects the occurrence of content 
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management unit (CPS unit) switching and executes the 
switching between keys to be applied in accordance with 
the detected content management unit (CPS unit) 
switching. If no key has been obtained, this program 
executes processing for presenting a message prompting 
the user for key acquisition. 
[0317] 

The following describes an operation to be 
executed at data recording if the information recording 
medium 691 has a data recordable configuration. Digital 
signal input and analog signal input are assumed as data 
to be recorded. 
[0318] 

In the case of a digital signal, it is inputted 
through the digital signal input and output I/F 610 and 
appropriately encrypted by the encryption processing 
means 650 to be stored in the information recording 
medium 691. If the data format of the inputted digital 
signal is converted and stored, the MPEG codec 63 0, the 
CPU 670, and TS/PS processing means 620 convert the data 
format into a storage data format. Then, the encryption 
processing means 650 executes appropriate encryption 
processing on the storage data format to be stored in 
the information recording medium 691. 
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[0319] 

In the case of an analog signal, an analog 
signal inputted in the input and output I/F 64 0 is 
converted by the D/A converter 641 into a digital signal, 
which is then converted into codec by the MPEG codec 63 0 
to be used at recording. Then, the codec is converted 
by the TS/PS processing means 62 0 into AV multiplexed 
data that is a recording data format. The AV 
multiplexed data is appropriately encrypted by the 
encryption processing means 650 as required to be stored 
in the information recording medium 691. The above- 
mentioned management tables, namely, 

"unit configuration and key management table"; 
"status management table" ; and 
"content use management information table" 
are also created or updated from time to time to be 
stored in the information recording medium 691. 
[0320] 

If the recording and reproducing apparatus gets 
necessary information via an external network, the 
obtained data is stored in the memory 680 in the 
recording and reproducing apparatus. The stored data 
includes key information necessary for content 
reproduction, subtitle and audio information to be 
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reproduced along with content reproduction, data such as 
still image, content management information, and 
operation rules (usage rules) of the reproducing 
apparatus corresponding to content management 
information, for example. 
[0321] 

It should be noted that programs for executing 
reproduction processing and recording processing are 
stored in a ROM 66 0, and the memory 680 is used as the 
storage area of parameters and data and the work area 
during the execution of these programs as required. 
With reference to FIG. 25, the device configuration 
permitting data recording and reproduction has been 
described above; it is also practicable to configure an 
apparatus having only reproduction capabilities or 
recording capabilities, to which the present invention 
is also applicable. 
[0322] 

[8. Exemplary network configuration] 

The following describes an exemplary 
configuration in which an information processing 
apparatus (recording and reproducing apparatus) for 
reproducing content by loading the above-mentioned 
information recording medium is connected to a network 
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such as a home network, with reference to FIG. 26. 
[0323] 

A recording and reproducing apparatus 711 is 
connected to a home network 710 via a digital I/F. The 
digital I/F is based on IEEE 13 94, Ethernet, or wireless 
LAN, for example. Use of content at in home includes 
the following forms for example. 
[0324] 

Reproduced content from an information recording 
medium loaded on the recording and reproducing apparatus 
711 is transmitted to a home server 712 having recording 
means such as a hard disc to be stored therein as copy 
content . 

The reproduced content is transmitted from the 
information recording medium loaded on the recording and 
reproducing apparatus 711 to such a content reproducing 
device 714 having output means like a display monitor as 
a TV or a PC, or copy content of the home server 712 is 
transmitted for streaming reproduction. 

A content reproducing device 713 such as a PC 
having remote control capability remotely operates the 
recording and reproducing apparatus 711 or the home 
server 712 to transmit and output the reproduced content 
from the information recording medium loaded on the 
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recording and reproducing apparatus 711 or the copy 
content of the home server 712. 

The reproduced content from the information 
recording medium loaded on the recording and reproducing 
apparatus 711 or the copy content of the home server 712 
is transmitted and outputted to a portable device 715. 

Data outputted from each networked device is 
recorded to a recording medium by the recording and 
reproducing apparatus 711. 

Further, if the information necessary for 
content reproduction must be obtained in the recording 
and reproducing apparatus 711 from a home server 72 0 via 
network of outside home for example outside home, the 
recording and reproducing apparatus 711 is connected to 
the home server 72 0 to get the necessary information. 

These processing operations may be executed. 

[0325] 

[9. Processing execution sequences] 

The following describes the sequences of 

reproducing content stored in the above-mentioned 

information recording medium, namely, the information 

recording medium storing the content encrypted with a 

unit key unique to each content management unit (CPS 

unit) and the sequences of other processing, with 

/ 
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reference to flowcharts. 
[0326] 

(1) Content reproduction processing 
First, a sequence of reproducing content from an 
information recording medium storing encrypted content 
on a content management unit (CPS unit) basis will be 
described with reference to the flowchart shown in FIG. 
27 . 
[0327] 

The processing shown in FIG. 2 7 is executed by 
an integrated reproduction control program for totally 
controlling the reproduction of content stored in an 
information processing apparatus (a reproducing 
apparatus) on which an information recording medium is 
loaded . 
[0328] 

In step S301, the information processing 
apparatus selects content subject to reproduction from 
content stored in an information recording medium, 
namely, from content management units (CPS units) . This 
processing is executed on the basis of the user input 
through an input means connected to the information 
processing apparatus or the input of information 
specifying content from a networked device, for example. 
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To be more specific, a reproduction program starts on 
the basis of the specification information of a user- 
specified title or application index in a layer 
configuration of content described before with reference 
to FIGS. 2 and 3. In accordance with the reproduction 
program, any one of the play lists is selected and, on 
the basis of the selected play list, a clip is selected 
to start reproduction. 
[0329] 

In step S302, the content management unit (CPS 
unit) that includes the content subject to reproduction 
is identified. As described before, each content 
management unit (CPS unit) is related with any one of 

title ; 

app lication i ndex ; 
reproduction program; 
play list; and 
clip . 

[0330] 

On the basis of any one of the above-mentioned 
settings, the integrated reproduction control program 
for totally controlling content reproduction identifies 
the content management unit to be reproduced. 
[0331] 
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In step S303, a decision is made whether the 
reproducing apparatus itself has the information 
necessary for the reproduction of the content management 
unit to be reproduced, namely, a unit key. That is, the 
memory of the reproducing apparatus is checked for the 
unit key that is the key corresponding to the content 
management unit selected as the content subject to 
reproduction. If the unit key is found, then, the 
content, namely, an AV stream in the content management 
unit is decrypted by use of the unit key for 
reproduction processing in step S306. It should be 
noted that "information necessary for reproduction" 
includes not only the unit key for content decryption 
but also, sometimes, download data for use in content 
reproduction and operation rules (usage rules) of the 
reproducing apparatus for content management information. 
The information processing apparatus checks the holding 
of these pieces of information for reproduction, as 
required. 
[0332] 

If the unit key and other necessary information 
are not held, then, in step S304, necessary information 
such as the unit key, download data for use in content 
reproduction, and operation rules (usage rules) of the 
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reproducing apparatus for content management information 
are obtained from the outside. For example, the unit 
key and other necessary information are obtained by 
following a predetermined procedure from a networked 
server for example. This processing will be described 
later . 
[0333] 

If the acquisition of the information (the unit 
key) is found successful in step S3 05, then the content, 
namely, an AV stream in the content management unit is 
decrypted by use of the unit key to execute reproduction 
processing in step S306. If the acquisition of the 
information (the unit key) is found unsuccessful , the 
processing is ended without executing content 
reproduction . 
[0334] 

The following describes a sequence of content 
copy processing with reference to FIG. 28. This 
processing stores a content management unit read from an 
information recording medium in a reproducing apparatus 
loaded with the information recording medium storing 
content encrypted on a content management unit basis 
into an information recording medium such as a server 
for example connected to a network (for example, a home 
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network) . The processing shown in FIG. 2 8 is executed 
in the information processing apparatus (the reproducing 
apparatus) on which an information recording medium is 
loaded . 
[0335] 

In step S311, the information processing 
apparatus selects content subject to copy processing 
from content stored in an information recording medium, 
namely, content management units. This processing is 
executed on the basis of the user input through an input 
means connected to the information processing apparatus 
or on the basis of the input of content specification 
information from a networked device, for example. 
[0336] 

In step S3 12, a content management unit (CPS 
unit) to be copied is selected. 
[0337] 

For each content management unit set for any one 
of the above, ability of copy is set to "content use 
management information table" described with reference 
to FIG. 22; if copy is permitted, the number of times 
copy is permitted may be specified. 
[0338] 

In step S313, a decision is made whether copy 
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specified content is copyable and, in step S314, a 
decision is made whether copy count is within limit 
count on the basis of "content use management 
information table". It should be noted that, for this 
"copyable" decision, not only copyability is checked by 
use of "content use management information table" on 
recording media, but also copyability information is 
obtained from an external server via a network if 
"content use management information table" is held in 
the external server for example. It is also practicable 
to purchase the right for copy from a server to get a 
content copy permission. 
[0339] 

For content not enabled for copying or content 
of which copy permission count limit has already been 
reached, the processing is ended without executing the 
copy processing. For content enabled for copying and of 
which copy permission count limit has not yet been 
reached, the procedure goes to step S3 15 to check the 
information about copy destination device compatibility. 
A copy destination device denotes a device such as a 
home server connected the present information processing 
apparatus via a network, for example. In checking for 
compatibility, it is determined whether, if MPEG-TS data 
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that is content stored in an information recording 
medium for example is copied directly by a device such 
as a home server, the server is capable of processing 
the MPEG-TS data. 
[0340] 

In step S3 16, if the content stored in the 
information recording medium is found copyable, then the 
procedure goes to step S319 to execute copy processing. 
[0341] 

If the content stored in the information 
recording medium is found not copyable in step S316, 
then the procedure goes to step S317 to determine 
whether the information recording medium stores other 
content for copy than the original content. If other 
content for copy is found, the data for copy is read 
from the information recording medium in step S320 to be 
copied to the copy destination device. If other data 
for copy is not found, then the procedure goes to step 
S3 18 to determine whether the data conversion of the 
original content, namely, the conversion to a data 
format reproducible on the copy destination device is 
enabled. If the data conversion is enabled, then the 
content is read from the information recording medium in 
step S3 21 to execute data conversion, the converted data 
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being copied to the copy destination device. If the 
conversion to a data format reproducible on the copy 
destination device is not enabled, the processing is 
ended without executing content copy processing. 
[0342] 

The following describes a sequence of content 
streaming reproduction processing with reference to FIG. 
29. In streaming reproduction processing, a content 
management unit is outputted to such a reproducing 
device connected to a network (for example, a home 
network) as a TV or a PC having an output means like a 
display monitor or a speaker for example. The content 
management unit is read from an information recording 
medium in a reproducing apparatus, which loaded the 
information recording medium storing content encrypted 
on a content management unit basis. The processing 
shown in FIG. 2 9 is executed in an information 
processing apparatus (a reproducing apparatus) on which 
an information recording medium is loaded. 
[0343] 

In step S331, the information processing 
apparatus selects content subject to streaming 
reproduction processing from content, namely, content 
management units stored in the information recording 
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medium. This processing is executed on the basis of the 
user input through an input means connected to the 
information processing apparatus or on the basis of the 
input of content specification information from a 
networked device, for example. 
[0344] 

In step S332, the content management unit (CPS 
unit) to be copied is identified. As described before, 
each content management unit is related with any one of: 

title; 

appl icat ion index ; 
reproduction program; 
play"Tist ; and 
clip . 

[0345] 

For each content management unit set for any one 
of the above, streaming reproducibility is set in 
"content use management information table" described 
with reference to FIG. 22. If streaming reproduction is 
enabled, streaming reproduction enabled device 
information may be set in this table. 
[0346] 

In step S333, a decision is made whether 
streaming reproduction is enabled on the basis of 
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"content use management information table" . It should 
be noted that this decision of "streaming enabled?" is 
executed by not only checking the streaming reproduction 
permission information based "content use management 
information table" recorded on recording media. If 
"content use management information table" is held in an 
external server, the permission information is acquired 
from the server by connecting thereto via a network. It 
is also practicable to purchase the right of streaming 
reproduction from a server. 
[0347] 

For the content not enabled for streaming 
reproduction, the processing is ended without executing 
the streaming processing. For the content enabled for 
streaming reproduction, the procedure goes to step S334 
to check the information about streaming data receiver 
device compatibility. A streaming data receiver device 
denotes a TV or a PC for example connected with a home 
network. The compatibility is determined by checking 
whether MPEG-TS data that is the content stored in an 
information recording medium may be processed by a 
streaming data receiver device, namely, the streaming 
data receiver device has TS (Transport Stream) 
processing means and MPEG codec capabilities, for 
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example . 
[0348] 

If the content stored in the information 
recording medium is found transmittable in step S335, 
then the content is read from the information recording 
medium in step S338, thereby starting the processing of 
transmitting the content to the streaming data receiver 
device . 
[0349] 

If the content stored in the information 
recording medium is found not transmittable in step S33 5, 
then the procedure goes to step S336 to determine 
whether the information recording medium stores other 
content to be transmitted for streaming reproduction 
than the original content. If the content to be 
transmitted for streaming reproduction is found, then 
this content is read from the information recording 
medium to be transmitted to the streaming data receiver 
device in step S339. If the content to be transmitted 
for streaming reproduction is not found, the procedure 
goes to step S337 to determine whether the data 
conversion of the original content, namely, the 
conversion to a data format reproducible on the 
streaming data receiver device is enabled. If the 

138 



S04P1108 



conversion is found enabled, then the procedure goes to 
step S340, in which the content is read from the 
information recording medium and the content is data- 
converted to be transmitted to the streaming data 
receiver device. If the conversion to a data format 
reproducible on the streaming data receiver device is 
found disabled, then the processing is ended without 
executing content transmission. 
[0350] 

The following describes a sequence of content 
remote reproduction processing with reference to FIG. 30. 
In processing, a content management unit is reproduced 
on such a reproducing device connected to a network (for 
example, a home network) as a TV or a PC having output 
means like a display monitor or a speaker, in a remote 
control manner. The content management unit is read 
from an information recording medium in a reproduction 
apparatus, which loaded the information recording medium 
storing content encrypted on a content management unit 
basis. The processing shown in FIG. 30 is executed in 
an information processing apparatus (a reproducing 
apparatus) on which an information recording medium is 
loaded . 
[0351] 
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In step S351, the information processing 
apparatus selects content subject to remote reproduction 
processing from content stored in an information 
recording medium, namely, content management units. 
This processing is executed on the basis of the input of 
content specification information from a networked 
device . 
[0352] 

In step S352, the content management unit (CPS 
unit) to be copied is identified. As described before, 
each content management unit is related with any one of: 

title; 

application index; 
reproduction program; 
play list; and 
clip . 

[0353] 

For each content management unit set for any one 
of the above, remote reproducibility is set in "content 
use management information table" described with 
reference to FIG. 22. If remote reproduction is enabled, 
remote reproduction enabled device information may be 
set in this table. 
[0354] 
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In step S353, a decision is made whether remote 
reproduction is enabled on the basis of "content use 
management information table" . It should be noted that 
this decision of "remote reproduction enabled?" is 
executed by not only checking the remote reproduction 
permission information based "content use management 
information table" recorded on recording media. If 
"content use management information table" is held in an 
external server, the permission information is acquired 
from the server by connecting thereto via a network. It 
is also practicable to purchase the right of remote 
reproduction from a server. 
[0355] 

For the content not enabled for remote 
reproduction, the processing is ended without executing 
the remote processing. For the content enabled for 
remote reproduction, the procedure goes to step S354 to 
check the information about remote reproduction content 
receiver device compatibility. A remote reproduction 
content receiver device denotes a TV or a PC for example 
connected with a home network. The compatibility is 
determined by checking whether MPEG-TS data that is the 
content stored in an information recording medium may be 
processed by a streaming data receiver device, namely, 
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the remote reproduction content receiver device has TS 
(Transport Stream) processing means and MPEG codec 

capabilities, for example. 
[0356] 

If the content stored in the information 
recording medium is found transmittable as it is in step 
S355, then the content is read from the information 
recording medium in step S356, thereby starting the 
processing of transmitting the content to the remote 
reproduction content receiver device. 
[0357] 

If the content stored in the information 
recording medium is found not transmittable as it is in 
step S356, then the processing is ended without 
executing content transmission. 
[0358] 

[10. Necessary information acquisition processing in 
content reproduction] 

The following describes the processing of 
acquiring information from an information recording 
medium or externally. The information becomes necessary 
for executing reproduction processing of content read 
from an information recording medium storing content 
encrypted by use of a unit key unique to each piece of 
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content, namely, each content management unit (CPS unit) 
stored in the information recording medium and other 
processing. The information to be acquired includes the 
unit key, the download data for use in content 
reproduction, and operations rules (usage rules) of a 
reproducing apparatus for content management information. 
These pieces of information are acquired from the data 
recorded to the information recording medium or a 
networked server in a predetermined procedure. 
[0359] 

The following describes an example of acquiring 
a unit key from the information recording medium with 
reference to FIG. 31. FIG. 31 shows an exemplary 
configuration in which unit key generation information 
allocated to each renewal key information block (RKB : 
Renewal Key Block) that may get media key Km unique to 
an information recording medium necessary for generating 
a content key that is a unit key is stored in the 
information recording medium along with content, and a 
reproducing apparatus gets the renewal key information 
block (RKB) from the information recording medium to get 
the unit key on the basis of media key Km obtained from 
the renewal key information block (RKB) and unit key 
generation processing using the unit key generation 
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information obtained from the information recording 
medium . 
[0360] 

The renewal key information block (RKB) is an 
encryption key information block that is able to get 
media key Km unique to recording media only by the 
decryption processing based on a device key stored in 
the reproducing apparatus having the legal content usage 
right. Because a key necessary for content decryption, 
namely, a unit key, must be generated by use of media 
key Km, only the reproducing apparatus having a legal 
content usage right is able to get the unit key. 
[0361] 

The following describes an RKB configuration and 
key acquisition processing with reference to FIGS. 32 
and 33. Numbers 0 through 15 shown at the bottom of FIG 
32 are indicative of user devices that are information 
processing apparatuses for using content, for example. 
Each leaf in a layer tree structure shown in FIG. 32 
corresponds to one device. 
[0362] 

At the time of manufacture or shipment, devices 
0 through 15 stores in a memory thereof a key set 
(device keys (DNK : Device Node Key)) composed of keys 
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(node keys) allocated to nodes extending from own leaf 
to the root and a leaf key of each leaf. K000 through 
Kllll at the bottom of FIG. 32 are indicative of leaf 
keys allocated to devices 0 through 15 and the keys 
including KR (root key) on top down to the node second 
from the bottom, namely KR through Kill, are node keys. 
[0363] 

In the tree structure shown in FIG. 32, device 0 
has leaf key K0000, node keys K000, K00, K0 , and KR as 
device keys, for example. Device 5 has K0101, K010, KOI, 
K0, and KR. Device 15 has Kllll, Kill, Kll, Kl, and KR. 
It should be noted that the tree shown in FIG. 32 has 
only 16 devices 0 through 15 and a symmetric structure 
having four layers; it is also practicable for the tree 
to have more devices and the number of layers other than 
four. 
[0364] 

For example, a portion enclosed by a dashed- line 
circle, namely, devices 0 , 1 , 2 , and 3 are assumed to be 
set as one group. For example, it is assumed that only 
the devices included in this group have the legal usage 
right, namely a license to use the encrypted content 
stored in the information recording medium. In this 
case, only devices 0, 1, 2, and 3 set RKB that enables 
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the acquisition of the keys applicable to content 
decryption, thereby storing RKB into the information 
recording medium in which the encrypted content is 
stored . 
[0365] 

As seen from FIG. 32, three devices 0, 1, 2, and 
3 included in one group share common keys K00, K0 , and 
KR as device keys (DNK: Device Node Key) stored in each 
device . 
[0366] 

At this moment, an RKB configuration permitting 
only devices 0, 1, and 2 to get media key Km for use in 
generating unit keys (Kul , Ku2 , and so on) applicable to 
the decryption of content is as shown in FIG. 33, for 
example. RKB is set as 

index encrypted data 

000 Enc(K0 00, Km) 

0010 Enc(K0010, Km). 

[0367] 

It should be noted that Enc(Kx, Ky) denotes 
encrypted data obtained by encrypting data Ky with key 
Kx. At this moment, devices 0 and 1 is able to decrypt 
the encrypted data of index [000] by use of device key 
[K000] owned by themselves. Device 2 is able to decrypt 
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the encrypted data of index [0010] of the above- 
mentioned RKB by use of device key [K0010] . The 
encryption processing of each of these pieces of 
encrypted data allows the acquisition of media key Km. 
After the acquisition of media key Km, devices 0 and 1 
are able to get unit keys (Kul, Ku2 , and so on) by the 
unit key generation information allocated to each 
content management unit and the unit key generation 
processing using media key Km. Other devices have none 
of device keys [KO00] and [K0010] and therefore are 
unable to get media key Km by the decryption by RKB if 
RKB having the configuration shown in FIG. 4 is received, 
so that other devices cannot generate unit keys (Kul, 
Ku2 , and so on) . 
[0368] 

Thus, by providing the configuration data 
corresponding to each device having a license, RKB is 
configured as a renewal key information block that is 
able to provide private information such as unit keys 
only to particular devices only on which the private 
information may by processed. Key information (RKB) is 
changeable in configuration thereof as desired as RKB 
that may be processed only on devices that allow content 
use . 
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[0369] 

Returning to FIG. 31, the processing to be 
executed in the reproducing apparatus will be described. 
A reproducing apparatus 82 0 reads renewal key- 
information block (RKB) 811 from an information 
recording medium 810 and, in a Renewal key information 
block processing section 822, applies a device key 821 
stored in the reproducing apparatus 82 0 to decrypt the 
renewal key information block (RKB) 811, thereby 
obtaining media key Km. In addition, in a Unit key 
acquisition section 823, the reproducing apparatus 820 
executes unit key generation processing by use of unit 
key generation information 812 obtained from the 
information recording medium and the media key to obtain 
a content key, namely, a unit key. The unit key 
generation information 812 includes "unit configuration 
and unit key management table" described before with 
reference to FIG. 5. "Unit configuration and unit key 
management table" is a management table in which unit 
setting unit information, content management unit 
identification information, and unit key identification 
information are related with each other. This table is 
configured as relating unit identifiers (CPS1, CPS2, and 
so on) as the identification information of a content 
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management unit corresponding to each title with 
identifiers (Kul, Ku2 , and so on) of each corresponding 
unit key. 
[0370] 

Further, a Data processing section 824 decrypts 
the content read from the information recording medium 
810, namely the encrypted content of AV stream for 
example in the content management unit, by applying a 
unit key, thereby getting and reproducing the content. 
It should be noted that the Unit key acquisition section 
823 detects content management unit switching on the 
basis of the management table in which unit setting unit 
information, content management unit identification 
information, and unit key identification information are 
related with each other, there executing the processing 
of changing applied unit keys in accordance with the 
detected information . 
[0371] 

FIG. 34 shows the processing of acquiring 
various kinds of information necessary for content 
reproduction not from the information recording medium 
but from a networked server. In acquiring necessary 
information such as keys from a server 850, content 831 
stored in an information recording medium 83 0 should be 
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in network associated status (bound status) in advance. 
[0372] 

In the example shown in FIG. 34, a reproducing 
apparatus 84 0 gets, as the acquired information 
necessary for content reproduction from the server, 
content use conditions (usage rules) and download data. 
The content use conditions include unit keys, content 
management information, and content usage right 
information. The download data includes such as 
operation control information, subtitle data, and audio 
data that allow the operation control at the time of 
reproduction on the basis of the control information to 
be acquired from the server, not the reproduction 
control information recorded to recording media. The 
server 850 has a database 852 in which these pieces of 
information are stored. 
[0373] 

In the example shown in FIG. 34, the reproducing 
apparatus 840 has an Authentication processing section 
841 for executing authentication processing by applying 
a device key. The server 850 has a device key database 
851 that stores a device key allocated to the 
reproducing apparatus that is a user device. The 
Authentication processing section 841 of the reproducing 
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apparatus 840 and an Authentication processing section 
853 of the server 850 execute the authentication 
processing by use of a shared device key, an 
authentication sequence on the basis of common key 
encryption method for example (the processing specified 
by ISO 9798 for example) to confirm mutual validity and 
generate a session key that is a key for encrypting 

transfer data. 

[0374] 

Upon successful authentication, a Data 
processing section 854 of the server 850 gets, under the 
condition that the reproducing apparatus 840 is a legal 
device having a legal device key, the information 
necessary for content reproduction from the database 852, 
content use conditions (usage rules) and download data. 
The content use conditions include unit keys, content 
management information, and content usage right 
information. The download data includes such as 
operation control information, subtitle data, and audio 
data that allow the operation control at the time of 
reproduction the basis of the control information to be 
acquired from the server, not the reproduction control 
information recorded to recording media and transmits 
the acquired data to the reproducing apparatus 840. It 
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should be noted that the data to be transmitted is 
encrypted with the session key. 
[0375] 

A unit key acquisition and data processing 
section 842 of the reproducing apparatus 840 applies the 
unit key received from the server to decrypt the 
encrypted data in the content management units 
configuring the content 831 read from the information 
recording medium 830, thereby executing content 
reproduction. It should be noted that, at the time of 
reproduction, the control and reproduction processing is 
executed on the basis of the download data such as the 
content management information, content use conditions 
(usage rules) , subtitle data, and audio data obtained 
from the server 850. The unit key acquisition and data 
processing section 842 of the reproducing apparatus 840 
notifies the Data processing section 854 of the server 
850 of any one of user identifier, information 
processing apparatus identifier, and information 
recording medium identifier, receives the operation 
control information corresponding to a notification 
identifier, and executes the reproduction or copy of the 
content stored in the above-mentioned information 
recording medium in accordance with the control 
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processing based on the reception operation control 
information. 
[0376] 

It should be noted that, upon acquisition of 
operation control information from the server 850, the 
reproducing apparatus 84 0 is able to execute operation 
control at the time of reproduction not only the basis 
of the reproduction control information recorded to 
recording media but on the basis of the control 
information acquired from a server. 
[0377] 

The following describes examples of operation 
control information to be acquired from a server. 
(Operation Control Information Use Example 1) 

Updated copy control information (CCI 
information) is handled as operation control information 
that may be acquired from a server. 

In principle, the reproducing apparatus 84 0 
executes control on the basis of the copy control 
information (CCI information) recorded on recording 
media as default but gets new copy control information 
(CCI information) from the reproducing apparatus 84 0 as 
operation control information. If the reproducing 
apparatus 840 got the update copy control information 
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(CCI information) from the server 850, then the 
reproducing apparatus 84 0 executes the processing on the 
basis of the copy control information (CCI information) 
obtained from the server 850. 
[0378] 

This configuration allows changing and updating 
of copy control information corresponding to various 
kinds of content after the sale of recording media with 
various timings, thereby allowing the reproducing 
apparatus to execute copy processing on the basis of 
changed and updated copy control information (CCI 

information) . 

[0379] 

For example, as default copy control information 
(CCI information) , copy control information (CCI 
information) disabled for copy to particular devices is 
set to an information recording medium storing the 
content. The reproducing apparatus 840 is connected to 
the server 850 to execute the processing such as user 
registration for example, thereby getting new copy 
control information (CCI information) from the server. 
The copy control information (CCI information) provided 
by the server 850 is the copy control information 
enabled for copy to particular devices, so that a 
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configuration may be provided in which only the 
reproducing apparatus 84 0 having copy permission on the 
basis of server connection processing is able to copy 
the content not allowed for the default copy control 
information (CCI information) . 
[0380] 

(Operation Control Information Use Example 2) 

All copy control information (CCI information) 
is acquired from the server 850. 

It is specified that the reproducing apparatus 
84 0 should acquire copy control information (CCI 
information) from the server 850 without recording copy 
control information (CCI information) on recording media. 
This configuration allows copy control for the content 
to be stored on recording media always on the side of 
the server 850 and allows the management of user and 
reproducing apparatus as an owner of recording media. 
[0381] 

(Operation Control Information Use Example 3) 

Applications such as Java are provided from the 
server 850 as operation control information. The 
reproducing apparatus 840 downloads applications such as 
Java from the server 85 0 and executes the downloaded 
applications. A subject range of Java applications is 
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not only simple reproduction control but also the 
execution of advertisement display, services for 
particular recording media buyers, and user registration 
and billing as content use conditions. 
[0382] 

As described above, providing application 
programs such as Java from the server 850 as operation 
control information to execute provided programs as 
content reproduction conditions may realize a 
configuration in which the reproducing apparatus 840 is 
necessarily made execute such processing as 
advertisement presentation, user registration, and usage 
fee billing, for example. 
[0383] 

(Operation Control Information Use Example 4) 

Operation control management including copy 
control management is executed for each user, each 
reproducing apparatus, and each piece of recording media 
on the side of server 850. 
[0384] 

In getting, by the reproducing apparatus 84 0, 
the information necessary for content reproduction, for 
example, various kinds of information such as unit keys 
and operation control information, the server 850 
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requires the reproducing apparatus 84 0 for the 
transmission of user identification information, 
reproducing apparatus identification information, 
recording medium unique identification information. The 
server 850 relates these kinds of identification 
information with the operation control information 
including copy control information (CCI information) 
provided to the user and registers the related 
information. The registration processing allows the 
operation control and management for each user, each 
reproducing apparatus, and each piece of recording 
medium on the side of the server 850. 
[0385] 

On the basis of the registered data, the server 
850 is able to individually allow the user, reproducing 
apparatus, and recording medium to update and change the 
operation control information including copy control 
information (CCI information) . The server generates 
operation control information appropriately 
corresponding to the identification information received 
from the user, reproducing apparatus, and the recording 
medium and transmits the generated information to the 
reproducing apparatus. On the basis of the operation 
control information received from the server, the 
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reproducing apparatus uses content . 
[0386] 

One embodiment of the operation control 
management including the copy control information (CCI 
information) for each user, each reproducing apparatus, 
and each recording medium may also be configured in 
which, as described above in the description of content 
management information with reference to FIG. 23, any 
control information that is not included in the copy 
control information (CCI information) specified by a 
recording system is set on the side of the server to be 
provided for the reproducing apparatus. 
[0387] 

As described before, the parameters and so on of 
copy control information (CCI information) are 
standardized for each particular recording system (DVD 
standards for example) ; once reproducing apparatuses 
compliant these standards have been propagated, it is 
difficult to extend copy control information (CCI 
information) . 
[0388] 

To overcome this difficulty, any control 
information not included in the copy control information 
(CCI information) specified by a recording system is set 
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as user defined information and the content owner or 
administrator on the side of the server 850 sets unique 
copy control information (CCI information) . 
[0389] 

The copy control information (CCI information) 
uniquely set by the server 850 (content owner or 
administrator) is provided to the reproducing apparatus 
840 and applications (Java for example) for interpreting 
the copy control information (CCI information) to the 
reproducing apparatus 840. Executing the applications 
obtained from the server 850, the reproducing apparatus 
84 0 interprets the uniquely defined copy control 
information (CCI information) obtained from the server 
850 to execute copy control in accordance with the 
uniquely defined copy control information (CCI 

information) . 

[0390] 

It should be noted that, in the above-mentioned 
example, content management information, content use 
conditions (usage rules) , operation control information, 
subtitle data, audio data, and other download data are 
shown in addition to unit keys as the transfer data from 
the server 850; these pieces of data are obtained as 
required in accordance with the reproduction of content 
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and therefore not always required. 
[0391] 

As with FIG. 34, FIG. 35 shows the processing of 
obtaining various kinds of information necessary for 
content reproduction from a server connected to a 
network. In FIG. 35, the reproducing apparatus 84 0 and 
the server 850 have authentication private keys and 
public key certificates. In FIG. 35, the device key of 
the reproducing apparatus 84 0 and the server key of the 
server 850 are set as the private key for authentication 
and the public key certificates storing the public keys 
corresponding to these private keys are set. 
[0392] 

When the reproducing apparatus 84 0 gets 
necessary information such as keys, it is supposed that 
the content 831 stored in the information recording 
medium 83 0 be kept in network associated status (bound 
status) . 
[0393] 

in the example shown in FIG. 35, the reproducing 
apparatus 84 0 gets, as the acquired information 
necessary for content reproduction from a server, 
content use conditions (usage rules) including unit keys, 
content management information, and content usage right 
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information, and download data such as operation control 
information, subtitle data, and audio data for enabling 
the operation control at the time of reproduction on the 
basis of not the reproduction control information 
recorded on recording media but the control information 
obtained from the server. The server 850 has a database 
852 that stores these pieces of information. 
[0394] 

In the example shown in FIG. 35, the reproducing 
apparatus 840 has a device key and the server 850 stores 
the server key in a server key database 855. The 
Authentication processing section 841 of the reproducing 
apparatus 840 and the Authentication processing section 
853 of the server 850 execute authentication processing 
by use of device key and server key, and an 
authentication sequence based on public key encryption 
processing method for example, thereby confirming mutual 
validity and generating a session key as a key for 
encrypting transfer data. 
. [0395] 

Upon successful authentication, the Data 
processing section 854 of the server 850 gets, under the 
condition that the reproducing apparatus 840 is a legal 
device having a legal device key, the information 
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necessary for content reproduction, namely, download 
data such as unit keys, content management information, 
content use conditions (usage rules) , operation control 
information, subtitle data, audio data, and still image 
data for example from the database 852 and transmits 
these pieces of obtained information to the reproducing 
apparatus 840. It should be noted that the data to be 
transmitted is encrypted with the session key. 
[0396] 

The unit key acquisition and data processing 
section 842 of the reproducing apparatus 84 0 decrypts 
the encrypted data in the content management units 
configuring the content 831 read from the information 
recording medium 83 0 by use of the unit key obtained 
from the server, thereby executing content reproduction. 
It should be noted that, in this reproduction, control 
and reproduction are executed by applying the download 
information such as content use conditions (usage rules) 
including content management information and content 
usage right information, subtitle data, audio data, and 
still image data obtained from the server 850. 
[0397] 

It should be noted that if operation control 
information is obtained from a server, the reproducing 
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apparatus 84 0 is able to execute operation control at 
the time of reproduction on the basis of not the 
reproduction control information recorded on recording 
media but the control information obtained from a server. 
[0398] 

For specific use forms of the operation control 
information obtained from a server, above-mentioned 
operation control information use examples 1 through 4 
described with reference to FIG. 34 are applicable. 
[0399] 

It should be noted that, in the above-mentioned 
example, the transfer data from the server 850 include 
content management "information, content usage conditions 

(usage rules) , operation control information, subtitle 
data, audio data, still image data, and other download 
data in addition to unit keys. These pieces of data are 
obtained as required in accordance with the reproduction 
of content and therefore not always obtained. 

[0400] 

FIG. 3 6 shows a processing example in which a 
reproduction apparatus 870 obtains an authentication key 
from a renewal key information block (RKB) 861 stored in 
an information recording medium 860 and authenticates a 
server 880 by application of an obtained authentication 
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key 872. 
[0401] 

A Renewal key information block processing 
section 873 of the reproduction apparatus 870 reads the 
renewal key information block (RKB) 861 from the 
information recording medium 860 and decrypts the 
renewal key information block (RKB) 861 by use of a 
device key 871 stored in the reproduction apparatus 870, 
thereby obtaining an authentication key. A renewal key 
information block (RKB) may be decrypted only by a 
device key of a reproducing apparatus not revoked 

(invalidated), thereby obtaining an authentication key. 

[0402] 

The server 880 has an authentication key 
database 881 storing an authentication key allocated to 
a reproducing apparatus that is a user device having a 
legal content reproduction right. Between an 
Authentication processing section 883 of the server 880 
and the Authentication processing section 883 of the 
reproduction apparatus 870, authentication processing 
based on a common key method is executed by use of a 
shared authentication key. 
[0403] 

Upon successful authentication, a Data 
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processing section 884 of the server 880 gets, from a 
database 882, under the condition that the reproducing 
apparatus 870 is a legal device having a legal device 
key, the information necessary for content reproduction, 
namely content use conditions (usage rules) including 
unit keys, content management information, and content 
usage right information and download data such as 
operation control information, subtitle data, audio data, 
and still data that allow the operation control at the 
time of reproduction the basis of the control 
information to be acquired from the server, not the 
reproduction control information recorded to recording 
media and transmits the acquired data to the reproducing 
apparatus 870. It should be noted that the data to be 
transmitted is encrypted with the session key. 
[0404] 

A Unit key acquisition and data processing 
section 874 of the reproducing apparatus 8 70 decrypts 
the encrypted data in the content management units 
configuring content 861 read from the information 
recording medium 860 by use of a unit key received from 
the server 880, thereby executing content reproduction. 
It should be noted that, control and reproduction are 
executed by applying the download data such as content 
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management information, content use conditions (usage 
rules) , operation control information, subtitle data, 
audio data, and still image data obtained from the 
server 880. 
[0405] 

It should be noted that if operation control 
information is obtained from the server, the reproducing 
apparatus 870 is able to execute operation control at 
the time of reproduction on the basis of not the 
reproduction control information recorded on recording 
media but the control information obtained from a server. 
[0406] 

For specific use forms of the operation control 
information obtained from a server, above-mentioned 
operation control information use examples 1 through 4 
described with reference to FIG. 34 are applicable. 
[0407] 

It should be noted that, in the above-mentioned 
example, the transfer data from the server 880 include 
content management information, content usage conditions 
(usage rules) including content use right information, 
operation control information, subtitle data, audio data, 
still image data, and other download data in addition to 
unit keys. These pieces of data are obtained as 
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required in accordance with the reproduction of content 
and therefore not always obtained. 
[0408] 

FIG. 37 shows an example in which a server 
provides a renewal key block (RKB) corresponding to 
content (content management unit) , namely, a renewal key 
block (RKB) that is able to get an authentication key 
only by the decryption processing by applying a device 
key of a reproducing apparatus having a legal content 
usage right, to the reproducing apparatus, which gets 
the authentication key from the renewal key block (RKB) 
to authenticate the server by use of the obtained 
authentication key, thereby executing the processing of 
acquiring necessary information from the server upon 
successful authentication. 
[0409] 

The RKB to be transmitted from the server to the 
reproducing apparatus is selected as each piece of 
content or an RKB that corresponds to the transmission 
point of time. If the RKB corresponds to each content, 
the RKB for that content is used for the acquisition of 
a unit key to be applied for the decryption of a given 
content management unit. If the RKB is an RKB of the 
version specified in correspondence with the time of RKE 
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transmission, the most recent RKB of that version is 
used. If there is a device revoked at that moment, the 
unprocessible RKB of the most recent version is 
transmitted to the reproducing apparatus in the revoked 
device . 
[0410] 

Another configuration may also be provided in 
which the RKB that was most recent at the time of 
content creation. In addition, a combination of the 
most recent version for that content may be configured. 
When the reproducing apparatus accesses the server, the 
server transmits an appropriate RKB to the reproducing 
apparatus. At this moment, the server may transmit the 
entire RKB or only a necessary part of the RKB for that 
reproducing apparatus. 
[0411] 

A Renewal key information block processing 
section 922 of an reproducing apparatus 92 0 gets an 
authentication key by decrypting a renewal key 
information block (RKB) read from a renewal key 
information block (RKB) database 931 and transmitted to 
the reproducing apparatus by a authentication processing 
section 933 of a server 930, by use of a device key 921 
stored in the reproducing apparatus 920. The decryption 
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of each renewal key information block (RKB) may be 
executed only by the device key of the reproducing 
apparatus not revoked (invalidated) , which is able to be 
get an authentication key. 
[0412] 

The server 930 has an authentication key 
database 932 storing the authentication key 
corresponding to RKB. Between the authentication 
processing section 933 of the server 930 and an 
authentication processing section 923 of the reproducing 
apparatus 920, authentication processing based on a 
common key method is executed by use of a shared 
authentication key. 
[0413] 

Upon successful authentication, a data 
processing section 935 of the server 930 gets, from a 
database 934, under the condition that the reproducing 
apparatus 870 is a legal device having a legal 
authentication key, the information necessary for 
content reproduction such as content use conditions 
(usage rules) including unit keys, content management 
information, and content usage right information, and 
download data such as operation control information, 
subtitle data, audio data, and still data that allow th< 
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operation control at the time of reproduction on the 
basis of the control information to be acquired from the 
server, not the reproduction control information 
recorded to recording media and transmits the acquired 
data to the reproducing apparatus 920. It should be 
noted that the data to be transmitted is encrypted with 
the session key. 
[0414] 

A unit key acquisition and data processing 
section 924 of the reproducing apparatus 92 0 decrypts 
the encrypted data in the content management units 
configuring content 911 read from the information 
recording medium 910 by use of a unit key received from 
the server 930, thereby executing content reproduction. 
It should be noted that, control and reproduction are 
executed by applying the download information such as 
content management information, content use conditions 

(usage rules) , operation control information, subtitle 
data, audio data, and still image data obtained from the 
server 930. 

[0415] 

It should be noted that if operation control 
information is obtained from the server 93 0, the 
reproducing apparatus 920 is able to execute operation 



S04P1108 



control at the time of reproduction on the basis of not 
the reproduction control information recorded on 
recording media but the control information obtained 
from a server. 
[0416] 

For specific use forms of the operation control 
information obtained from a server, above-mentioned 
operation control information use examples 1 through 4 
described with reference to FIG. 34 are applicable. 
[0417] 

It should be noted that, in the above-mentioned 
example, the transfer data from the server 93 0 include 
content management information, content usage conditions 
(usage rules) including content use right information, 
subtitle data, audio data, still image data, and other 
download data in addition to unit keys. These pieces of 
data are obtained as required in accordance with the 
reproduction of content and therefore not always 
obtained. 
[0418] 

While preferred embodiments of the present 
invention have been described using specific terms, it 
is to be understood that modifications and variations 
will be apparent to those skilled in the art without 
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departing from the spirit of the invention. Therefore, 
the scope of the invention is to be determined solely by 
the claims described above. 
[0419] 

The above-mentioned sequence of processing 
operations may be executed by software, hardware, or the 
combination thereof. When the above-mentioned sequence 
of processing operations is executed by software, the 
programs constituting the processing sequence are 
installed in a memory of a computer which is built in 
dedicated hardware equipment or installed, into a 
general -purpose personal computer for example in which 
various programs may be installed for the execution of 
various functions . 
[0420] 

For example, programs may be recorded to a hard 
disk and a ROM (Read Only Memory) that are recording 
media in advance. Alternatively, programs may be 
temporarily or permanently stored (or recorded) in 
removable recording media such as flexible disc, CD-ROM 
(Compact Disc Read Only Memory) , MO (Magneto Optical) 
disc, DVD (Digital Versatile Disc) , magnetic disc, and 
semiconductor memory. These removal recording media may 
be provided as so-called package software. 
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[0421] 

It should be noted that, in addition to the 
installation from removable recording media such as 
mentioned above into a computer, programs may be 
downloaded from a download site into a computer in a 
wireless manner or via a network such as LAN (Local Area 
Network) or the Internet in a wired manner. The 
computer receives downloaded programs and records them 

into incorporated recording media such as a hard disc. 

[0422] 

It should be noted herein that the steps for 
describing each program include not only the processing 
operations which are sequentially executed in a time- 
dependent manner but also the processing operations 
which are executed concurrently or discretely. 

It should also be noted that term "system" as 
used herein denotes a logical set of a plurality of 
component units that are not always located in a same 
housing . 

[Industrial Applicability] 
[0423] 

As described and according to embodiments of the 
invention, a plurality of content management units 
corresponding to title, index and other information are 
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set as data areas obtained by partitioning stored 
content in an information recording medium storing 
content. Different unit keys that are encryption keys 
are allocated to different content management units. At 
least the content real data included in each content 
management unit is encrypted by use of the unit key and 
the encrypted data is stored. This novel configuration 
allows content use management on a unit basis; to be 
more specific, the novel configuration allows various 
kinds of content use control such as reproduction 
control, copy control, and so on. According to the 
present invention, content use control may be executed 
on an individual content management unit basis, so that, 
in an information recording medium storing many pieces 
of content for example, each of segmented pieces of 
content may be managed. This management method is 
applicable to a configuration that requires segmented 
copyright management or use management in storing 
content in mass capacity content recording media such as 
DVD and blue laser disc for example . 
[0424] 

Further, according to embodiments of the 
invention, in an information processing apparatus for 
executing the reproduction of content stored in an 
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information recording medium, a content management unit 
including data area selected for reproduction from the 
content stored in the information recording medium is 
identified, a unit key corresponding to the identified 
content management unit is selected, and encrypted data 
included in the content management unit is decrypted by 
use of the selected unit key, thereby reproducing the 
content. This novel configuration allows the reliable 
reproduction of the content in each content management 
unit. Also, in unit switching, content key switching is 
executed, thereby allowing content reproduction by the 
decryption based on a proper key whenever unit switching 
occurs. Consequently, the present invention is 
applicable to information processing apparatuses for 
reproducing the information recording media on which 
encryption is executed on a content management unit 
basis . 
[0425] 

Still further, according to embodiments of the 
invention, if, in an information processing apparatus 
for executing the reproduction of content stored in an 
information recording medium, a content management unit 
including a data area selected for reproduction from the 
content stored in the information recording medium is 
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identified and content reproduction is executed by- 
getting a unit key corresponding to the identified 
content management unit, a configuration in which 
operation control information such as copy control 
information and reproduction control information is 
acquired from an externally connected server is realized, 
thereby allowing the processing such as applying renewed 
copy control information. Also, the novel configuration 
realizes a configuration in which copy control 
information, corresponding to user identifier, 
reproducing apparatus identifier or information 
recording medium identifier and operation control 
information such as reproduction control information may 
be obtained from externally connected servers, thereby 
executing the processing on the basis of individual 
operation control corresponding to each user and 
reproducing apparatus. Consequently, the present 
invention is applicable to any apparatuses and methods 
that execute reproduction control or copy control 
corresponding to each user or each reproducing apparatus 
or content . 

[Brief Description of Drawings] 

[0426] 

[FIG. 1] 
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FIG. 1 is a schematic diagram illustrating a 
configuration of data stored in an information recording 
medium. 
[FIG. 2] 

FIG. 2 is a schematic diagram illustrating an 
exemplary format of content stored in an information 
recording medium. 
[FIG. 3] 

FIG. 3 is a schematic diagram illustrating 
another exemplary format of content stored in an 
information recording medium. 
[FIG. 4] 

FIG. 4 is a schematic diagram illustrating an 
example in which content management units to be set for 
content stored in an information recording medium are 
arranged by title. 
[FIG. 5] 

FIG. 5 is a diagram showing an exemplary unit 
configuration and an exemplary unit key management table 
in a content management unit configuration corresponding 
to titles. 
[FIG. 6] 

FIG. 6 is a schematic diagram illustrating an 
example in which content management units to be set for 
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content stored in an information recording medium are 
arranged by application index. 
[FIG. 7] 

FIG. 7 is a diagram showing an exemplary unit 
configuration and an exemplary unit key management table 
in a content management unit configuration corresponding 
to application indexes. 
[FIG. 8] 

FIG. 8 is a schematic diagram illustrating an 
example in which content management units to be set for 
content stored in an information recording medium are 
arranged by reproduction program. 
[FIG. 9] 

FIG. 9 is a diagram showing an exemplary unit 
configuration and an exemplary unit key management table 
in a content management unit configuration corresponding 
to reproduction programs. 
[FIG. 10] 

FIG. 10 is a schematic diagram illustrating an 
example in which content management units to be set for 
content stored in an information recording medium are 
arranged by play list. 
[FIG. 11] 

FIG. 11 is a diagram showing an exemplary unit 
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configuration and an exemplary unit key management table 
in a content management unit configuration corresponding 
to play lists. 
[FIG. 12] 

FIG. 12 is a schematic diagram illustrating an 
example in which content management units to be set for 
content stored in an information recording medium are 
arranged by clip. 
[FIG. 13] 

FIG. 13 is a diagram showing an exemplary unit 
configuration and an exemplary unit key management table 
in a content management unit configuration corresponding 
to clips. 
[FIG. 14] 

FIG. 14 is a schematic diagram illustrating an 
exemplary configuration in which applications and 
content are independent CPS units. 
[FIG. 15] 

FIG. 15 is a diagram showing an exemplary unit 
configuration and an exemplary unit key management table 
in a configuration in which applications and content are 
independent CPS units. 
[FIG. 16] 

FIG. 16 is a schematic diagram illustrating an 
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exemplary layer configuration in which titles for use in 
movie content for example and applications such as game 
content and Web content for example are handled in 
parallel . 
[FIG. 17] 

FIG. 17 is a schematic diagram illustrating an 
exemplary CPS unit setting in which titles for use in 
movie content for example and applications such as game 
content and Web content for example are handled in 
parallel . 
[FIG. 18] 

FIG. 18 is a diagram showing an exemplary unit 
configuration and an exemplary unit key management table 
in CPS unit setting in a layer configuration in which 
titles for use in movie content for example and 
applications such as game content and Web content for 
example are handled in parallel. 
[FIG. 19] 

FIG. 19 is a schematic diagram illustrating 
content network independence and content use forms and 
usage rules in network-associated status. 
[FIG. 20] 

FIG. 20 is a schematic diagram illustrating 
content network independence and content copy rules in 
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network-associated status . 
[FIG. 21] 

FIG. 21 is a diagram showing exemplary data in a 
content status management table. 
[FIG. 22] 

FIG. 22 is a diagram showing exemplary data in a 
content use management information table. 
[FIG. 23] 

FIG. 23 is a diagram showing an exemplary 
content use management information table with content 
management information corresponding to content status 
recorded in variable-length data. 
[FIG. 24] 

FIG. 24 is a schematic diagram illustrating 
locations of data storage directories and management 
tables on an information recording medium. 
[FIG. 25] 

FIG. 25 is a block diagram illustrating an 
exemplary configuration of an information processing 
apparatus for reproducing an information recording 
medium loaded thereon. 
[FIG. 26] 

FIG. 26 is a block diagram illustrating an 
exemplary network configuration for using content stored 
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in an information recording medium. 
[FIG. 27] 

FIG. 2 7 is a flowchart indicative of a content 
reproduction processing sequence. 
[FIG. 28] 

FIG. 2 8 is a flowchart indicative of a content 
copy processing sequence. 
[FIG. 29] 

FIG. 2 9 is a flowchart indicative of content 
streaming reproduction processing sequence. 
[FIG. 30] 

FIG. 30 is a flowchart indicative of content 
remote reproduction processing sequence. 
[FIG. 31] 

FIG. 31 is a block diagram illustrating an 
exemplary information acquisition processing for 
acquiring a unit key and other information necessary for 
content reproduc t ion . 
[FIG. 32] 

FIG. 32 is a tree structure diagram illustrating 
an layer tree structure applicable to the encryption and 
distribution of keys and data. 
[FIG. 33] 

FIG. 33 is a block diagram illustrating 
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exemplary distribution and exemplary decryption based on 
RKB (Renewal Key Block) of unit key. 
[FIG. 34] 

FIG. 34 is a block diagram illustrating an 
exemplary information acquisition processing for 
acquiring a unit key and other information necessary for 
content reproduction . 
[FIG. 35] 

FIG. 35 is a block diagram illustrating another 
exemplary information acquisition processing for 
acquiring a unit key and other information necessary for 
content reproduction . 
[FIG. 3 6] 

FIG. 36 a block diagram illustrating still 
another exemplary information acquisition processing for 
acquiring a unit key and other information necessary for 
content reproduction . 
[FIG. 37] 

FIG. 37 is a block diagram illustrating yet 
another exemplary information acquisition processing for 
acquiring a unit key and other information necessary for 
content reproduc t ion . 

[Description of Reference Symbols] 

[0427] 
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100 Information recording medium 

101 Content 

102 Disc ID 

210 Index (title) 

22 0 Reproduction program 

230 Reproduction section specification file (play 
240 Clip 

251 Clip information 

261, 262, 263 AV streams 

311 to 315 Application indexes 

321, 322, 323 Reproduction programs 

331 Image file 

332 Audio file 

333 Data file 

371, 372 Application index files 

373 to 375 Application execution files 

381 to 3 84 Reproduction programs 

411, 412 Content management units (CPS units) 

415, 416 Content management units (CPS units) 

421, 422 Content management units (CPS units) 

431, 432 Content management units (CPS units) 

441, 442 Content management units (CPS units) 

4 51 to 4 54 Content management units (CPS units) 

461 to 463 Content management units (CPS units) 
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501 Content management information configuration data 
5 02 Content management information configuration data 
503 Content management information configuration data 

511 Content data section 

512 Management data section 

600 Information processing apparatus 

601 Bus 

610 Input and output I/F 
620 TS/PS processing means 

63 0 MPEG codec 

64 0 Input and output I/F 
641 A/D, D/A converter 

650 Encryption processing means 
660 ROM 
670 CPU 
68 0 Memory 
690 Drive 

6 91 Information recording medium 

710 Home network 

711 Recording and reproducing apparatus 

712 Home server 

713 Content reproducing device 

714 Content reproducing device 

715 Portable device 
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72 0 External server 

810 Information recording medium 

811 Renewal key information block (RKB) 

812 Unit key generation information 

82 0 Reproducing apparatus 

821 Device key 

822 Renewal key information block processing section 

823 Unit key acquisition section 

824 Data processing section 

83 0 Information recording medium 
831 Content 

84 0 Reproducing apparatus 

841 Device key 

842 unit key acquisition and data processing section 

850 Server 

851 Device key database 

852 Database 

853 Authentication processing section 

854 Data processing section 

855 Server key database 

860 Information recording medium 

861 Renewal key information block (RKB) 

862 Content 

870 Reproduction apparatus 
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871 Device key 

872 Authentication processing section 

873 Renewal key information block processing section 

874 Unit key acquisition and data processing section 

880 Server 

881 Authentication key database 

882 Database 

883 Authentication processing section 

884 Data processing section 

910 Information recording medium 

911 Content 

92 0 Reproducing apparatus 

921 Device key 

922 Renewal key information block processing section 

923 Authentication processing section 

924 Unit key acquisition and data processing section 

93 0 Server 

931 Renewal key information block (RKB) database 

932 Authentication key database 

933 Authentication section 

934 Database 

935 Data processing section 



187 



